RHBA-2025:0301

Vulnerability from csaf_redhat - Published: 2025-01-20 10:26 - Updated: 2026-08-09 17:22
Summary
Red Hat Bug Fix Advisory: Red Hat Quay v3.13.3 bug fix release
Severity
Important
Notes
Topic: Red Hat Quay 3.13.3 is now available with bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Quay 3.13.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2024-45337

A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.

8.2 (High)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
CWE-285 - Improper Authorization
Affected products
Product Identifier Version Remediation
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2024-55565

A flaw was found in nanoid. Affected versions of nanoid mishandles non-integer values. When nanoid is called with a fractional value, there were a number of undesirable effects: - In browser and non-secure, the code infinite loops on while (size--) - In node, the value of poolOffset becomes fractional, causing calls to nanoid to return zeroes until the pool is next filled: when i is initialized to poolOffset, pool[i] & 63 -> undefined & 63 -> 0 - If the first call in node is a fractional argument, the initial buffer allocation fails with an error The highest impact of this issue system availability.

6.5 (Medium)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Product Identifier Version Remediation
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x —
Vendor Fix fix
Threats
Impact Moderate
CVE-2024-56201

A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs to be able to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates where the template author can also choose the template filename.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-150 - Improper Neutralization of Escape, Meta, or Control Sequences
Affected products
Product Identifier Version Remediation
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2024-56326

A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates. Jinja's sandbox does catch calls to str.format and ensures they don't escape the sandbox. However, storing a reference to a malicious string's format method is possible, then passing that to a filter that calls it. No such filters are built into Jinja but could be present through custom filters in an application. After the fix, such indirect calls are also handled by the sandbox.

6.3 (Medium)
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Affected products
Product Identifier Version Remediation
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64 —
Vendor Fix fix
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x —
Vendor Fix fix
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHBA-2025:0301 self
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2024-45337 self
https://bugzilla.redhat.com/show_bug.cgi?id=2331720 external
https://www.cve.org/CVERecord?id=CVE-2024-45337 external
https://nvd.nist.gov/vuln/detail/CVE-2024-45337 external
https://github.com/golang/crypto/commit/b4f1988a3… external
https://go.dev/cl/635315 external
https://go.dev/issue/70779 external
https://groups.google.com/g/golang-announce/c/-nP… external
https://pkg.go.dev/vuln/GO-2024-3321 external
https://access.redhat.com/security/cve/CVE-2024-55565 self
https://bugzilla.redhat.com/show_bug.cgi?id=2331063 external
https://www.cve.org/CVERecord?id=CVE-2024-55565 external
https://nvd.nist.gov/vuln/detail/CVE-2024-55565 external
https://github.com/ai/nanoid/compare/3.3.7...3.3.8 external
https://github.com/ai/nanoid/pull/510 external
https://github.com/ai/nanoid/releases/tag/5.0.9 external
https://access.redhat.com/security/cve/CVE-2024-56201 self
https://bugzilla.redhat.com/show_bug.cgi?id=2333854 external
https://www.cve.org/CVERecord?id=CVE-2024-56201 external
https://nvd.nist.gov/vuln/detail/CVE-2024-56201 external
https://github.com/pallets/jinja/commit/767b23617… external
https://github.com/pallets/jinja/issues/1792 external
https://github.com/pallets/jinja/releases/tag/3.1.5 external
https://github.com/pallets/jinja/security/advisor… external
https://access.redhat.com/security/cve/CVE-2024-56326 self
https://bugzilla.redhat.com/show_bug.cgi?id=2333856 external
https://www.cve.org/CVERecord?id=CVE-2024-56326 external
https://nvd.nist.gov/vuln/detail/CVE-2024-56326 external
https://github.com/pallets/jinja/commit/48b0687e0… external
https://github.com/pallets/jinja/security/advisor… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.13.3 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.13.3",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2025:0301",
        "url": "https://access.redhat.com/errata/RHBA-2025:0301"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_0301.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.13.3 bug fix release",
    "tracking": {
      "current_release_date": "2026-08-09T17:22:25+00:00",
      "generator": {
        "date": "2026-08-09T17:22:25+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.12"
        }
      },
      "id": "RHBA-2025:0301",
      "initial_release_date": "2025-01-20T10:26:26+00:00",
      "revision_history": [
        {
          "date": "2025-01-20T10:26:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-01-20T10:26:26+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-09T17:22:25+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Quay v3",
                "product": {
                  "name": "Quay v3",
                  "product_id": "8Base-Quay-3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.13.3-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.13.3-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
                  "product_id": "quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.13.3-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.13.3-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
                "product": {
                  "name": "quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
                  "product_id": "quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.13.3-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.13.3-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.13.3-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
                  "product_id": "quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.13.3-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
                  "product_id": "quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.13.3-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
                "product": {
                  "name": "quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
                  "product_id": "quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.13.3-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.13.3-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.13.3-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
                  "product_id": "quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.13.3-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.13.3-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
                "product": {
                  "name": "quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
                  "product_id": "quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.13.3-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.13.3-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.13.3-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
                  "product_id": "quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.13.3-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
                  "product_id": "quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.13.3-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x",
                "product": {
                  "name": "quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x",
                  "product_id": "quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.13.3-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.13.3-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.13.3-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
                  "product_id": "quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.13.3-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.13.3-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
                "product": {
                  "name": "quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
                  "product_id": "quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.13.3-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.13.3-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.13.3-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
                  "product_id": "quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.13.3-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
                  "product_id": "quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.13.3-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
                "product": {
                  "name": "quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
                  "product_id": "quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.13.3-6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le"
        },
        "product_reference": "quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x"
        },
        "product_reference": "quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64"
        },
        "product_reference": "quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le"
        },
        "product_reference": "quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64"
        },
        "product_reference": "quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
        },
        "product_reference": "quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-45337",
      "cwe": {
        "id": "CWE-285",
        "name": "Improper Authorization"
      },
      "discovery_date": "2024-12-11T19:00:54.247490+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331720"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is classified as important rather than critical because it does not directly enable unauthorized access but rather introduces a risk of authorization bypass if the application or library misuses the PublicKeyCallback API. The vulnerability relies on incorrect assumptions made by the application when handling the sequence or state of keys provided during SSH authentication. Properly implemented systems that use the Permissions field or avoid relying on external state remain unaffected. Additionally, the vulnerability does not allow direct exploitation to gain control over a system without the presence of insecure logic in the application\u0027s handling of authentication attempts.\n\n\nRed Hat Enterprise Linux(RHEL) 8 \u0026 9 and Red Hat Openshift marked as not affected as it was determined that the problem function `ServerConfig.PublicKeyCallback`, as noted in the CVE-2024-45337 issue, is not called by Podman, Buildah, containers-common, or the gvisor-tap-vsock projects.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
          "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-45337"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331720",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45337",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909",
          "url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/635315",
          "url": "https://go.dev/cl/635315"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/70779",
          "url": "https://go.dev/issue/70779"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ",
          "url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2024-3321",
          "url": "https://pkg.go.dev/vuln/GO-2024-3321"
        }
      ],
      "release_date": "2024-12-11T18:55:58.506000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-01-20T10:26:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:0301"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto"
    },
    {
      "cve": "CVE-2024-55565",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2024-12-09T02:00:45.255738+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331063"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in nanoid. Affected versions of nanoid mishandles non-integer values. When nanoid is called with a fractional value, there were a number of undesirable effects:\n\n- In browser and non-secure, the code infinite loops on while (size--)\n- In node, the value of poolOffset becomes fractional, causing calls to nanoid to return zeroes until the pool is next filled: when i is initialized to poolOffset, pool[i] \u0026 63 -\u003e undefined \u0026 63 -\u003e 0\n- If the first call in node is a fractional argument, the initial buffer allocation fails with an error\n\nThe highest impact of this issue system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nanoid: nanoid mishandles non-integer values",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
          "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-55565"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331063",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331063"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-55565",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-55565"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-55565",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55565"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/compare/3.3.7...3.3.8",
          "url": "https://github.com/ai/nanoid/compare/3.3.7...3.3.8"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/pull/510",
          "url": "https://github.com/ai/nanoid/pull/510"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/releases/tag/5.0.9",
          "url": "https://github.com/ai/nanoid/releases/tag/5.0.9"
        }
      ],
      "release_date": "2024-12-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-01-20T10:26:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:0301"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nanoid: nanoid mishandles non-integer values"
    },
    {
      "cve": "CVE-2024-56201",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2024-12-23T16:00:38.768252+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2333854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja\u0027s sandbox being used. An attacker needs to be able to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates where the template author can also choose the template filename.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jinja2: Jinja has a sandbox breakout through malicious filenames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability has rated as a IMPORTANT flaw because an attacker controlling both the template content and filename to execute arbitrary Python code, bypassing the sandbox.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
          "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-56201"
        },
        {
          "category": "external",
          "summary": "RHBZ#2333854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-56201",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-56201"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-56201",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56201"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f",
          "url": "https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/issues/1792",
          "url": "https://github.com/pallets/jinja/issues/1792"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/releases/tag/3.1.5",
          "url": "https://github.com/pallets/jinja/releases/tag/3.1.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699",
          "url": "https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699"
        }
      ],
      "release_date": "2024-12-23T15:37:36.110000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-01-20T10:26:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:0301"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jinja2: Jinja has a sandbox breakout through malicious filenames"
    },
    {
      "cve": "CVE-2024-56326",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2024-12-23T16:00:46.619763+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2333856"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates. Jinja\u0027s sandbox does catch calls to str.format and ensures they don\u0027t escape the sandbox. However, storing a reference to a malicious string\u0027s format method is possible, then passing that to a filter that calls it. No such filters are built into Jinja but could be present through custom filters in an application. After the fix, such indirect calls are also handled by the sandbox.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jinja2: Jinja has a sandbox breakout through indirect reference to format method",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Moderate due to an oversight in Jinja\u0027s sandbox environment, allowing attackers to execute arbitrary Python code through controlled template content. This requires control over template content, making exploitation possible only in specific applications, thus limiting its overall impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
          "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-56326"
        },
        {
          "category": "external",
          "summary": "RHBZ#2333856",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333856"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-56326",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-56326"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-56326",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56326"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4",
          "url": "https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/releases/tag/3.1.5",
          "url": "https://github.com/pallets/jinja/releases/tag/3.1.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h",
          "url": "https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h"
        }
      ],
      "release_date": "2024-12-23T15:43:49.400000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-01-20T10:26:26+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:0301"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le",
            "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jinja2: Jinja has a sandbox breakout through indirect reference to format method"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.