Vulnerability-Lookup

RHBA-2025:14521

Vulnerability from csaf_redhat - Published: 2025-08-27 10:53 - Updated: 2026-08-07 13:42

Summary

Red Hat Bug Fix Advisory: Red Hat Quay v3.13.8 bug fix release

Severity

Important

Notes

Topic: Red Hat Quay 3.13.8 is now available with bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Quay 3.13.8

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-32023

A flaw was found in Redis. This flaw allows an authenticated user to trigger an integer overflow by sending a specially crafted string, resulting in a stack or heap out-of-bounds write during hyperloglog operations. This issue potentially results in remote code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 30 products

Product	Version	Remediation
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:1ee661a128ff7a4ca9fe33f2cefe7d17f3aed9b56865b0c6ede43cd3d87750a4_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:1f24ed706144287fd1107374b211f9e2bc954f396f17772ab60fd96c17cab47f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:31f1254d001ea74644b68f51b0ca7f467f5c06d942e5f4f6e09e560dc8c592c2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:16980744b4d7dc06bb2fb6111c5ce8bd99fa56c71fa03d7930556a470d9eb736_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8a1eae2af0f39b3590addbf4d92987651bc2a0b79ee75d486d8c64af965e5b29_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b8aa74c5b2635a6d3413eeac6fc0f6eb9a2e459089aaabbf626ea3ef92a67ce0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:5e3a6a447579e6a46c0b2ecd6600ac91a7db29c9beac6572c34898eb75ad9adf_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a3d79c954d3ab0a488fc16992fb4a6166e11e74198241b2a8432cbc6b5a5291b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d314b014726586ffac5871a5de4ae8c44c9ae9ad66b8d3d7d141904d5dd98718_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:0c95660d70d43250ed9a8020e0c3a824764b517fdc1e052a0a0c9293d6a6eccf_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9bd435c7a788405fbe848fc4af8ca2f06892f9a57b5ae45f2aabb75730e599c5_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a1686339b8076c93b4804f74e7662eaa79e645bad5169543388d4f0ee94223bc_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:37a54cb73b9f7ebf35d105ff2eceb245b4b5d6a17cd59b2231340732a20d1300_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:4e723c745572096f6b8ad9be2824cab346b2368f3c1a7c3f932b5ff07352e98e_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:ecee959ff9f8941775cc2215ff1f422b150d504e54be989a7ae34b51d0fee1d5_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:2703de775b2ba3d918b2ef2e793e50483ec79b4548a9b805a0038229ef4e2c05_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:783380361431859301477dfe63b6915240e934ffd07a2af2651094579be47a15_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:bf4365ef885ac75a4fb267b4ff0f78b0a4a66fbc6989e08d26d2fff2303cc037_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9b5704ad2378faa18549f903f1c1aa9eba16400cd4870024a502167b94d16266_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f91346c06de18304d2069173dff6acbf6579e48102653200606e9bd03bf1dc3f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f9c9389872049907df9dc7a608fea46b556e81d74cb614977efada54fd38c8a4_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:4a004584fa6c7187481e8c8480f17e0e4edd18c32f52a2e271c68d02f1a9655f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:6ef1cc4866f961a819a86807d87f05d450a885c86576bddbcd02f5409725842e_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:869e00b7d0f624d9a4f49ccb3575fc9c9aeb02d65334cc4f1780be0568ece9eb_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:c5aa967417f760b93bbd93ddf33f137440b0270c46bf00099773bf2ae88512e4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:f4051caccc2b3480e5f56449d775b093ddef5976366448cb97cb7f3639e81e7c_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:fe30a0c9fab208974711a6d8bddcc7118d3398bccd76bfc0b925f4536b92414e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:0006f9e6699c201a49405ab0def316f485f701fe8b6154a94509b0a9c16c60c3_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:5db65b09004a74967eb7786c461534bf54e779bc0e2c0e19856c2dc23899780b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:db70080447d7363de20d90f64a38d7338ee971c30c17c92fe810a7b1e993ca12_s390x	—	Vendor Fix fix Workaround

Threats

Impact Important

References

12 references

URL	Category
https://access.redhat.com/errata/RHBA-2025:14521	self
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-32023	self
https://bugzilla.redhat.com/show_bug.cgi?id=2376858	external
https://www.cve.org/CVERecord?id=CVE-2025-32023	external
https://nvd.nist.gov/vuln/detail/CVE-2025-32023	external
https://github.com/redis/redis/commit/50188747cbf…	external
https://github.com/redis/redis/releases/tag/6.2.19	external
https://github.com/redis/redis/releases/tag/7.2.10	external
https://github.com/redis/redis/releases/tag/7.4.5	external
https://github.com/redis/redis/releases/tag/8.0.3	external
https://github.com/redis/redis/security/advisorie…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.13.8 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.13.8",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2025:14521",
        "url": "https://access.redhat.com/errata/RHBA-2025:14521"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_14521.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.13.8 bug fix release",
    "tracking": {
      "current_release_date": "2026-08-07T13:42:05+00:00",
      "generator": {
        "date": "2026-08-07T13:42:05+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.12"
        }
      },
      "id": "RHBA-2025:14521",
      "initial_release_date": "2025-08-27T10:53:39+00:00",
      "revision_history": [
        {
          "date": "2025-08-27T10:53:39+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-27T10:53:39+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-07T13:42:05+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Quay v3",
                "product": {
                  "name": "Quay v3",
                  "product_id": "8Base-Quay-3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:b8aa74c5b2635a6d3413eeac6fc0f6eb9a2e459089aaabbf626ea3ef92a67ce0_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:b8aa74c5b2635a6d3413eeac6fc0f6eb9a2e459089aaabbf626ea3ef92a67ce0_amd64",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:b8aa74c5b2635a6d3413eeac6fc0f6eb9a2e459089aaabbf626ea3ef92a67ce0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:b8aa74c5b2635a6d3413eeac6fc0f6eb9a2e459089aaabbf626ea3ef92a67ce0?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:d314b014726586ffac5871a5de4ae8c44c9ae9ad66b8d3d7d141904d5dd98718_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:d314b014726586ffac5871a5de4ae8c44c9ae9ad66b8d3d7d141904d5dd98718_amd64",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:d314b014726586ffac5871a5de4ae8c44c9ae9ad66b8d3d7d141904d5dd98718_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:d314b014726586ffac5871a5de4ae8c44c9ae9ad66b8d3d7d141904d5dd98718?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:37a54cb73b9f7ebf35d105ff2eceb245b4b5d6a17cd59b2231340732a20d1300_amd64",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:37a54cb73b9f7ebf35d105ff2eceb245b4b5d6a17cd59b2231340732a20d1300_amd64",
                  "product_id": "quay/quay-builder-rhel8@sha256:37a54cb73b9f7ebf35d105ff2eceb245b4b5d6a17cd59b2231340732a20d1300_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:37a54cb73b9f7ebf35d105ff2eceb245b4b5d6a17cd59b2231340732a20d1300?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:0c95660d70d43250ed9a8020e0c3a824764b517fdc1e052a0a0c9293d6a6eccf_amd64",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:0c95660d70d43250ed9a8020e0c3a824764b517fdc1e052a0a0c9293d6a6eccf_amd64",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:0c95660d70d43250ed9a8020e0c3a824764b517fdc1e052a0a0c9293d6a6eccf_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:0c95660d70d43250ed9a8020e0c3a824764b517fdc1e052a0a0c9293d6a6eccf?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:1ee661a128ff7a4ca9fe33f2cefe7d17f3aed9b56865b0c6ede43cd3d87750a4_amd64",
                "product": {
                  "name": "quay/clair-rhel8@sha256:1ee661a128ff7a4ca9fe33f2cefe7d17f3aed9b56865b0c6ede43cd3d87750a4_amd64",
                  "product_id": "quay/clair-rhel8@sha256:1ee661a128ff7a4ca9fe33f2cefe7d17f3aed9b56865b0c6ede43cd3d87750a4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:1ee661a128ff7a4ca9fe33f2cefe7d17f3aed9b56865b0c6ede43cd3d87750a4?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:783380361431859301477dfe63b6915240e934ffd07a2af2651094579be47a15_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:783380361431859301477dfe63b6915240e934ffd07a2af2651094579be47a15_amd64",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:783380361431859301477dfe63b6915240e934ffd07a2af2651094579be47a15_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:783380361431859301477dfe63b6915240e934ffd07a2af2651094579be47a15?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:f9c9389872049907df9dc7a608fea46b556e81d74cb614977efada54fd38c8a4_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:f9c9389872049907df9dc7a608fea46b556e81d74cb614977efada54fd38c8a4_amd64",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:f9c9389872049907df9dc7a608fea46b556e81d74cb614977efada54fd38c8a4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:f9c9389872049907df9dc7a608fea46b556e81d74cb614977efada54fd38c8a4?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:4a004584fa6c7187481e8c8480f17e0e4edd18c32f52a2e271c68d02f1a9655f_amd64",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:4a004584fa6c7187481e8c8480f17e0e4edd18c32f52a2e271c68d02f1a9655f_amd64",
                  "product_id": "quay/quay-operator-bundle@sha256:4a004584fa6c7187481e8c8480f17e0e4edd18c32f52a2e271c68d02f1a9655f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:4a004584fa6c7187481e8c8480f17e0e4edd18c32f52a2e271c68d02f1a9655f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.13.8-13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:fe30a0c9fab208974711a6d8bddcc7118d3398bccd76bfc0b925f4536b92414e_amd64",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:fe30a0c9fab208974711a6d8bddcc7118d3398bccd76bfc0b925f4536b92414e_amd64",
                  "product_id": "quay/quay-operator-rhel8@sha256:fe30a0c9fab208974711a6d8bddcc7118d3398bccd76bfc0b925f4536b92414e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:fe30a0c9fab208974711a6d8bddcc7118d3398bccd76bfc0b925f4536b92414e?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:5db65b09004a74967eb7786c461534bf54e779bc0e2c0e19856c2dc23899780b_amd64",
                "product": {
                  "name": "quay/quay-rhel8@sha256:5db65b09004a74967eb7786c461534bf54e779bc0e2c0e19856c2dc23899780b_amd64",
                  "product_id": "quay/quay-rhel8@sha256:5db65b09004a74967eb7786c461534bf54e779bc0e2c0e19856c2dc23899780b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:5db65b09004a74967eb7786c461534bf54e779bc0e2c0e19856c2dc23899780b?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.13.8-4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:8a1eae2af0f39b3590addbf4d92987651bc2a0b79ee75d486d8c64af965e5b29_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:8a1eae2af0f39b3590addbf4d92987651bc2a0b79ee75d486d8c64af965e5b29_s390x",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:8a1eae2af0f39b3590addbf4d92987651bc2a0b79ee75d486d8c64af965e5b29_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:8a1eae2af0f39b3590addbf4d92987651bc2a0b79ee75d486d8c64af965e5b29?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:5e3a6a447579e6a46c0b2ecd6600ac91a7db29c9beac6572c34898eb75ad9adf_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:5e3a6a447579e6a46c0b2ecd6600ac91a7db29c9beac6572c34898eb75ad9adf_s390x",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:5e3a6a447579e6a46c0b2ecd6600ac91a7db29c9beac6572c34898eb75ad9adf_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:5e3a6a447579e6a46c0b2ecd6600ac91a7db29c9beac6572c34898eb75ad9adf?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:ecee959ff9f8941775cc2215ff1f422b150d504e54be989a7ae34b51d0fee1d5_s390x",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:ecee959ff9f8941775cc2215ff1f422b150d504e54be989a7ae34b51d0fee1d5_s390x",
                  "product_id": "quay/quay-builder-rhel8@sha256:ecee959ff9f8941775cc2215ff1f422b150d504e54be989a7ae34b51d0fee1d5_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:ecee959ff9f8941775cc2215ff1f422b150d504e54be989a7ae34b51d0fee1d5?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a1686339b8076c93b4804f74e7662eaa79e645bad5169543388d4f0ee94223bc_s390x",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a1686339b8076c93b4804f74e7662eaa79e645bad5169543388d4f0ee94223bc_s390x",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a1686339b8076c93b4804f74e7662eaa79e645bad5169543388d4f0ee94223bc_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:a1686339b8076c93b4804f74e7662eaa79e645bad5169543388d4f0ee94223bc?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:1f24ed706144287fd1107374b211f9e2bc954f396f17772ab60fd96c17cab47f_s390x",
                "product": {
                  "name": "quay/clair-rhel8@sha256:1f24ed706144287fd1107374b211f9e2bc954f396f17772ab60fd96c17cab47f_s390x",
                  "product_id": "quay/clair-rhel8@sha256:1f24ed706144287fd1107374b211f9e2bc954f396f17772ab60fd96c17cab47f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:1f24ed706144287fd1107374b211f9e2bc954f396f17772ab60fd96c17cab47f?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:bf4365ef885ac75a4fb267b4ff0f78b0a4a66fbc6989e08d26d2fff2303cc037_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:bf4365ef885ac75a4fb267b4ff0f78b0a4a66fbc6989e08d26d2fff2303cc037_s390x",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:bf4365ef885ac75a4fb267b4ff0f78b0a4a66fbc6989e08d26d2fff2303cc037_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:bf4365ef885ac75a4fb267b4ff0f78b0a4a66fbc6989e08d26d2fff2303cc037?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:f91346c06de18304d2069173dff6acbf6579e48102653200606e9bd03bf1dc3f_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:f91346c06de18304d2069173dff6acbf6579e48102653200606e9bd03bf1dc3f_s390x",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:f91346c06de18304d2069173dff6acbf6579e48102653200606e9bd03bf1dc3f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:f91346c06de18304d2069173dff6acbf6579e48102653200606e9bd03bf1dc3f?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:6ef1cc4866f961a819a86807d87f05d450a885c86576bddbcd02f5409725842e_s390x",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:6ef1cc4866f961a819a86807d87f05d450a885c86576bddbcd02f5409725842e_s390x",
                  "product_id": "quay/quay-operator-bundle@sha256:6ef1cc4866f961a819a86807d87f05d450a885c86576bddbcd02f5409725842e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:6ef1cc4866f961a819a86807d87f05d450a885c86576bddbcd02f5409725842e?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.13.8-13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:c5aa967417f760b93bbd93ddf33f137440b0270c46bf00099773bf2ae88512e4_s390x",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:c5aa967417f760b93bbd93ddf33f137440b0270c46bf00099773bf2ae88512e4_s390x",
                  "product_id": "quay/quay-operator-rhel8@sha256:c5aa967417f760b93bbd93ddf33f137440b0270c46bf00099773bf2ae88512e4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:c5aa967417f760b93bbd93ddf33f137440b0270c46bf00099773bf2ae88512e4?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:db70080447d7363de20d90f64a38d7338ee971c30c17c92fe810a7b1e993ca12_s390x",
                "product": {
                  "name": "quay/quay-rhel8@sha256:db70080447d7363de20d90f64a38d7338ee971c30c17c92fe810a7b1e993ca12_s390x",
                  "product_id": "quay/quay-rhel8@sha256:db70080447d7363de20d90f64a38d7338ee971c30c17c92fe810a7b1e993ca12_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:db70080447d7363de20d90f64a38d7338ee971c30c17c92fe810a7b1e993ca12?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.13.8-4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:16980744b4d7dc06bb2fb6111c5ce8bd99fa56c71fa03d7930556a470d9eb736_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:16980744b4d7dc06bb2fb6111c5ce8bd99fa56c71fa03d7930556a470d9eb736_ppc64le",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:16980744b4d7dc06bb2fb6111c5ce8bd99fa56c71fa03d7930556a470d9eb736_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:16980744b4d7dc06bb2fb6111c5ce8bd99fa56c71fa03d7930556a470d9eb736?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:a3d79c954d3ab0a488fc16992fb4a6166e11e74198241b2a8432cbc6b5a5291b_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:a3d79c954d3ab0a488fc16992fb4a6166e11e74198241b2a8432cbc6b5a5291b_ppc64le",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:a3d79c954d3ab0a488fc16992fb4a6166e11e74198241b2a8432cbc6b5a5291b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:a3d79c954d3ab0a488fc16992fb4a6166e11e74198241b2a8432cbc6b5a5291b?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:4e723c745572096f6b8ad9be2824cab346b2368f3c1a7c3f932b5ff07352e98e_ppc64le",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:4e723c745572096f6b8ad9be2824cab346b2368f3c1a7c3f932b5ff07352e98e_ppc64le",
                  "product_id": "quay/quay-builder-rhel8@sha256:4e723c745572096f6b8ad9be2824cab346b2368f3c1a7c3f932b5ff07352e98e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:4e723c745572096f6b8ad9be2824cab346b2368f3c1a7c3f932b5ff07352e98e?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9bd435c7a788405fbe848fc4af8ca2f06892f9a57b5ae45f2aabb75730e599c5_ppc64le",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9bd435c7a788405fbe848fc4af8ca2f06892f9a57b5ae45f2aabb75730e599c5_ppc64le",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9bd435c7a788405fbe848fc4af8ca2f06892f9a57b5ae45f2aabb75730e599c5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:9bd435c7a788405fbe848fc4af8ca2f06892f9a57b5ae45f2aabb75730e599c5?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:31f1254d001ea74644b68f51b0ca7f467f5c06d942e5f4f6e09e560dc8c592c2_ppc64le",
                "product": {
                  "name": "quay/clair-rhel8@sha256:31f1254d001ea74644b68f51b0ca7f467f5c06d942e5f4f6e09e560dc8c592c2_ppc64le",
                  "product_id": "quay/clair-rhel8@sha256:31f1254d001ea74644b68f51b0ca7f467f5c06d942e5f4f6e09e560dc8c592c2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:31f1254d001ea74644b68f51b0ca7f467f5c06d942e5f4f6e09e560dc8c592c2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:2703de775b2ba3d918b2ef2e793e50483ec79b4548a9b805a0038229ef4e2c05_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:2703de775b2ba3d918b2ef2e793e50483ec79b4548a9b805a0038229ef4e2c05_ppc64le",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:2703de775b2ba3d918b2ef2e793e50483ec79b4548a9b805a0038229ef4e2c05_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:2703de775b2ba3d918b2ef2e793e50483ec79b4548a9b805a0038229ef4e2c05?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:9b5704ad2378faa18549f903f1c1aa9eba16400cd4870024a502167b94d16266_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:9b5704ad2378faa18549f903f1c1aa9eba16400cd4870024a502167b94d16266_ppc64le",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:9b5704ad2378faa18549f903f1c1aa9eba16400cd4870024a502167b94d16266_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:9b5704ad2378faa18549f903f1c1aa9eba16400cd4870024a502167b94d16266?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:869e00b7d0f624d9a4f49ccb3575fc9c9aeb02d65334cc4f1780be0568ece9eb_ppc64le",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:869e00b7d0f624d9a4f49ccb3575fc9c9aeb02d65334cc4f1780be0568ece9eb_ppc64le",
                  "product_id": "quay/quay-operator-bundle@sha256:869e00b7d0f624d9a4f49ccb3575fc9c9aeb02d65334cc4f1780be0568ece9eb_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:869e00b7d0f624d9a4f49ccb3575fc9c9aeb02d65334cc4f1780be0568ece9eb?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.13.8-13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:f4051caccc2b3480e5f56449d775b093ddef5976366448cb97cb7f3639e81e7c_ppc64le",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:f4051caccc2b3480e5f56449d775b093ddef5976366448cb97cb7f3639e81e7c_ppc64le",
                  "product_id": "quay/quay-operator-rhel8@sha256:f4051caccc2b3480e5f56449d775b093ddef5976366448cb97cb7f3639e81e7c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:f4051caccc2b3480e5f56449d775b093ddef5976366448cb97cb7f3639e81e7c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.13.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:0006f9e6699c201a49405ab0def316f485f701fe8b6154a94509b0a9c16c60c3_ppc64le",
                "product": {
                  "name": "quay/quay-rhel8@sha256:0006f9e6699c201a49405ab0def316f485f701fe8b6154a94509b0a9c16c60c3_ppc64le",
                  "product_id": "quay/quay-rhel8@sha256:0006f9e6699c201a49405ab0def316f485f701fe8b6154a94509b0a9c16c60c3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:0006f9e6699c201a49405ab0def316f485f701fe8b6154a94509b0a9c16c60c3?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.13.8-4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:1ee661a128ff7a4ca9fe33f2cefe7d17f3aed9b56865b0c6ede43cd3d87750a4_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:1ee661a128ff7a4ca9fe33f2cefe7d17f3aed9b56865b0c6ede43cd3d87750a4_amd64"
        },
        "product_reference": "quay/clair-rhel8@sha256:1ee661a128ff7a4ca9fe33f2cefe7d17f3aed9b56865b0c6ede43cd3d87750a4_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:1f24ed706144287fd1107374b211f9e2bc954f396f17772ab60fd96c17cab47f_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:1f24ed706144287fd1107374b211f9e2bc954f396f17772ab60fd96c17cab47f_s390x"
        },
        "product_reference": "quay/clair-rhel8@sha256:1f24ed706144287fd1107374b211f9e2bc954f396f17772ab60fd96c17cab47f_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:31f1254d001ea74644b68f51b0ca7f467f5c06d942e5f4f6e09e560dc8c592c2_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:31f1254d001ea74644b68f51b0ca7f467f5c06d942e5f4f6e09e560dc8c592c2_ppc64le"
        },
        "product_reference": "quay/clair-rhel8@sha256:31f1254d001ea74644b68f51b0ca7f467f5c06d942e5f4f6e09e560dc8c592c2_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:16980744b4d7dc06bb2fb6111c5ce8bd99fa56c71fa03d7930556a470d9eb736_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:16980744b4d7dc06bb2fb6111c5ce8bd99fa56c71fa03d7930556a470d9eb736_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:16980744b4d7dc06bb2fb6111c5ce8bd99fa56c71fa03d7930556a470d9eb736_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:8a1eae2af0f39b3590addbf4d92987651bc2a0b79ee75d486d8c64af965e5b29_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8a1eae2af0f39b3590addbf4d92987651bc2a0b79ee75d486d8c64af965e5b29_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:8a1eae2af0f39b3590addbf4d92987651bc2a0b79ee75d486d8c64af965e5b29_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:b8aa74c5b2635a6d3413eeac6fc0f6eb9a2e459089aaabbf626ea3ef92a67ce0_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b8aa74c5b2635a6d3413eeac6fc0f6eb9a2e459089aaabbf626ea3ef92a67ce0_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:b8aa74c5b2635a6d3413eeac6fc0f6eb9a2e459089aaabbf626ea3ef92a67ce0_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:5e3a6a447579e6a46c0b2ecd6600ac91a7db29c9beac6572c34898eb75ad9adf_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:5e3a6a447579e6a46c0b2ecd6600ac91a7db29c9beac6572c34898eb75ad9adf_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:5e3a6a447579e6a46c0b2ecd6600ac91a7db29c9beac6572c34898eb75ad9adf_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:a3d79c954d3ab0a488fc16992fb4a6166e11e74198241b2a8432cbc6b5a5291b_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a3d79c954d3ab0a488fc16992fb4a6166e11e74198241b2a8432cbc6b5a5291b_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:a3d79c954d3ab0a488fc16992fb4a6166e11e74198241b2a8432cbc6b5a5291b_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:d314b014726586ffac5871a5de4ae8c44c9ae9ad66b8d3d7d141904d5dd98718_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d314b014726586ffac5871a5de4ae8c44c9ae9ad66b8d3d7d141904d5dd98718_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:d314b014726586ffac5871a5de4ae8c44c9ae9ad66b8d3d7d141904d5dd98718_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:0c95660d70d43250ed9a8020e0c3a824764b517fdc1e052a0a0c9293d6a6eccf_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:0c95660d70d43250ed9a8020e0c3a824764b517fdc1e052a0a0c9293d6a6eccf_amd64"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:0c95660d70d43250ed9a8020e0c3a824764b517fdc1e052a0a0c9293d6a6eccf_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9bd435c7a788405fbe848fc4af8ca2f06892f9a57b5ae45f2aabb75730e599c5_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9bd435c7a788405fbe848fc4af8ca2f06892f9a57b5ae45f2aabb75730e599c5_ppc64le"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9bd435c7a788405fbe848fc4af8ca2f06892f9a57b5ae45f2aabb75730e599c5_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a1686339b8076c93b4804f74e7662eaa79e645bad5169543388d4f0ee94223bc_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a1686339b8076c93b4804f74e7662eaa79e645bad5169543388d4f0ee94223bc_s390x"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a1686339b8076c93b4804f74e7662eaa79e645bad5169543388d4f0ee94223bc_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:37a54cb73b9f7ebf35d105ff2eceb245b4b5d6a17cd59b2231340732a20d1300_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:37a54cb73b9f7ebf35d105ff2eceb245b4b5d6a17cd59b2231340732a20d1300_amd64"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:37a54cb73b9f7ebf35d105ff2eceb245b4b5d6a17cd59b2231340732a20d1300_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:4e723c745572096f6b8ad9be2824cab346b2368f3c1a7c3f932b5ff07352e98e_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:4e723c745572096f6b8ad9be2824cab346b2368f3c1a7c3f932b5ff07352e98e_ppc64le"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:4e723c745572096f6b8ad9be2824cab346b2368f3c1a7c3f932b5ff07352e98e_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:ecee959ff9f8941775cc2215ff1f422b150d504e54be989a7ae34b51d0fee1d5_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ecee959ff9f8941775cc2215ff1f422b150d504e54be989a7ae34b51d0fee1d5_s390x"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:ecee959ff9f8941775cc2215ff1f422b150d504e54be989a7ae34b51d0fee1d5_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:2703de775b2ba3d918b2ef2e793e50483ec79b4548a9b805a0038229ef4e2c05_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:2703de775b2ba3d918b2ef2e793e50483ec79b4548a9b805a0038229ef4e2c05_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:2703de775b2ba3d918b2ef2e793e50483ec79b4548a9b805a0038229ef4e2c05_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:783380361431859301477dfe63b6915240e934ffd07a2af2651094579be47a15_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:783380361431859301477dfe63b6915240e934ffd07a2af2651094579be47a15_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:783380361431859301477dfe63b6915240e934ffd07a2af2651094579be47a15_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:bf4365ef885ac75a4fb267b4ff0f78b0a4a66fbc6989e08d26d2fff2303cc037_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:bf4365ef885ac75a4fb267b4ff0f78b0a4a66fbc6989e08d26d2fff2303cc037_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:bf4365ef885ac75a4fb267b4ff0f78b0a4a66fbc6989e08d26d2fff2303cc037_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:9b5704ad2378faa18549f903f1c1aa9eba16400cd4870024a502167b94d16266_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9b5704ad2378faa18549f903f1c1aa9eba16400cd4870024a502167b94d16266_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:9b5704ad2378faa18549f903f1c1aa9eba16400cd4870024a502167b94d16266_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:f91346c06de18304d2069173dff6acbf6579e48102653200606e9bd03bf1dc3f_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f91346c06de18304d2069173dff6acbf6579e48102653200606e9bd03bf1dc3f_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:f91346c06de18304d2069173dff6acbf6579e48102653200606e9bd03bf1dc3f_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:f9c9389872049907df9dc7a608fea46b556e81d74cb614977efada54fd38c8a4_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f9c9389872049907df9dc7a608fea46b556e81d74cb614977efada54fd38c8a4_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:f9c9389872049907df9dc7a608fea46b556e81d74cb614977efada54fd38c8a4_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:4a004584fa6c7187481e8c8480f17e0e4edd18c32f52a2e271c68d02f1a9655f_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:4a004584fa6c7187481e8c8480f17e0e4edd18c32f52a2e271c68d02f1a9655f_amd64"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:4a004584fa6c7187481e8c8480f17e0e4edd18c32f52a2e271c68d02f1a9655f_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:6ef1cc4866f961a819a86807d87f05d450a885c86576bddbcd02f5409725842e_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:6ef1cc4866f961a819a86807d87f05d450a885c86576bddbcd02f5409725842e_s390x"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:6ef1cc4866f961a819a86807d87f05d450a885c86576bddbcd02f5409725842e_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:869e00b7d0f624d9a4f49ccb3575fc9c9aeb02d65334cc4f1780be0568ece9eb_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:869e00b7d0f624d9a4f49ccb3575fc9c9aeb02d65334cc4f1780be0568ece9eb_ppc64le"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:869e00b7d0f624d9a4f49ccb3575fc9c9aeb02d65334cc4f1780be0568ece9eb_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:c5aa967417f760b93bbd93ddf33f137440b0270c46bf00099773bf2ae88512e4_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c5aa967417f760b93bbd93ddf33f137440b0270c46bf00099773bf2ae88512e4_s390x"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:c5aa967417f760b93bbd93ddf33f137440b0270c46bf00099773bf2ae88512e4_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:f4051caccc2b3480e5f56449d775b093ddef5976366448cb97cb7f3639e81e7c_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:f4051caccc2b3480e5f56449d775b093ddef5976366448cb97cb7f3639e81e7c_ppc64le"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:f4051caccc2b3480e5f56449d775b093ddef5976366448cb97cb7f3639e81e7c_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:fe30a0c9fab208974711a6d8bddcc7118d3398bccd76bfc0b925f4536b92414e_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:fe30a0c9fab208974711a6d8bddcc7118d3398bccd76bfc0b925f4536b92414e_amd64"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:fe30a0c9fab208974711a6d8bddcc7118d3398bccd76bfc0b925f4536b92414e_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:0006f9e6699c201a49405ab0def316f485f701fe8b6154a94509b0a9c16c60c3_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:0006f9e6699c201a49405ab0def316f485f701fe8b6154a94509b0a9c16c60c3_ppc64le"
        },
        "product_reference": "quay/quay-rhel8@sha256:0006f9e6699c201a49405ab0def316f485f701fe8b6154a94509b0a9c16c60c3_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:5db65b09004a74967eb7786c461534bf54e779bc0e2c0e19856c2dc23899780b_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:5db65b09004a74967eb7786c461534bf54e779bc0e2c0e19856c2dc23899780b_amd64"
        },
        "product_reference": "quay/quay-rhel8@sha256:5db65b09004a74967eb7786c461534bf54e779bc0e2c0e19856c2dc23899780b_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:db70080447d7363de20d90f64a38d7338ee971c30c17c92fe810a7b1e993ca12_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:db70080447d7363de20d90f64a38d7338ee971c30c17c92fe810a7b1e993ca12_s390x"
        },
        "product_reference": "quay/quay-rhel8@sha256:db70080447d7363de20d90f64a38d7338ee971c30c17c92fe810a7b1e993ca12_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-32023",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2025-07-07T16:01:22.982604+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2376858"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Redis. This flaw allows an authenticated user to trigger an integer overflow by sending a specially crafted string, resulting in a stack or heap out-of-bounds write during hyperloglog operations. This issue potentially results in remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw can only be exploited by an authenticated attacker when the Redis server has hyperloglog operations implemented, limiting the impact of this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:1ee661a128ff7a4ca9fe33f2cefe7d17f3aed9b56865b0c6ede43cd3d87750a4_amd64",
          "8Base-Quay-3:quay/clair-rhel8@sha256:1f24ed706144287fd1107374b211f9e2bc954f396f17772ab60fd96c17cab47f_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:31f1254d001ea74644b68f51b0ca7f467f5c06d942e5f4f6e09e560dc8c592c2_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:16980744b4d7dc06bb2fb6111c5ce8bd99fa56c71fa03d7930556a470d9eb736_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8a1eae2af0f39b3590addbf4d92987651bc2a0b79ee75d486d8c64af965e5b29_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b8aa74c5b2635a6d3413eeac6fc0f6eb9a2e459089aaabbf626ea3ef92a67ce0_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:5e3a6a447579e6a46c0b2ecd6600ac91a7db29c9beac6572c34898eb75ad9adf_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a3d79c954d3ab0a488fc16992fb4a6166e11e74198241b2a8432cbc6b5a5291b_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d314b014726586ffac5871a5de4ae8c44c9ae9ad66b8d3d7d141904d5dd98718_amd64",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:0c95660d70d43250ed9a8020e0c3a824764b517fdc1e052a0a0c9293d6a6eccf_amd64",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9bd435c7a788405fbe848fc4af8ca2f06892f9a57b5ae45f2aabb75730e599c5_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a1686339b8076c93b4804f74e7662eaa79e645bad5169543388d4f0ee94223bc_s390x",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:37a54cb73b9f7ebf35d105ff2eceb245b4b5d6a17cd59b2231340732a20d1300_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:4e723c745572096f6b8ad9be2824cab346b2368f3c1a7c3f932b5ff07352e98e_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ecee959ff9f8941775cc2215ff1f422b150d504e54be989a7ae34b51d0fee1d5_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:2703de775b2ba3d918b2ef2e793e50483ec79b4548a9b805a0038229ef4e2c05_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:783380361431859301477dfe63b6915240e934ffd07a2af2651094579be47a15_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:bf4365ef885ac75a4fb267b4ff0f78b0a4a66fbc6989e08d26d2fff2303cc037_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9b5704ad2378faa18549f903f1c1aa9eba16400cd4870024a502167b94d16266_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f91346c06de18304d2069173dff6acbf6579e48102653200606e9bd03bf1dc3f_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f9c9389872049907df9dc7a608fea46b556e81d74cb614977efada54fd38c8a4_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:4a004584fa6c7187481e8c8480f17e0e4edd18c32f52a2e271c68d02f1a9655f_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:6ef1cc4866f961a819a86807d87f05d450a885c86576bddbcd02f5409725842e_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:869e00b7d0f624d9a4f49ccb3575fc9c9aeb02d65334cc4f1780be0568ece9eb_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c5aa967417f760b93bbd93ddf33f137440b0270c46bf00099773bf2ae88512e4_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:f4051caccc2b3480e5f56449d775b093ddef5976366448cb97cb7f3639e81e7c_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:fe30a0c9fab208974711a6d8bddcc7118d3398bccd76bfc0b925f4536b92414e_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:0006f9e6699c201a49405ab0def316f485f701fe8b6154a94509b0a9c16c60c3_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:5db65b09004a74967eb7786c461534bf54e779bc0e2c0e19856c2dc23899780b_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:db70080447d7363de20d90f64a38d7338ee971c30c17c92fe810a7b1e993ca12_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-32023"
        },
        {
          "category": "external",
          "summary": "RHBZ#2376858",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376858"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-32023",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-32023"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-32023",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32023"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445",
          "url": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/6.2.19",
          "url": "https://github.com/redis/redis/releases/tag/6.2.19"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/7.2.10",
          "url": "https://github.com/redis/redis/releases/tag/7.2.10"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/7.4.5",
          "url": "https://github.com/redis/redis/releases/tag/7.4.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/8.0.3",
          "url": "https://github.com/redis/redis/releases/tag/8.0.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43",
          "url": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43"
        }
      ],
      "release_date": "2025-07-07T15:22:19.155000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-27T10:53:39+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:1ee661a128ff7a4ca9fe33f2cefe7d17f3aed9b56865b0c6ede43cd3d87750a4_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:1f24ed706144287fd1107374b211f9e2bc954f396f17772ab60fd96c17cab47f_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:31f1254d001ea74644b68f51b0ca7f467f5c06d942e5f4f6e09e560dc8c592c2_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:16980744b4d7dc06bb2fb6111c5ce8bd99fa56c71fa03d7930556a470d9eb736_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8a1eae2af0f39b3590addbf4d92987651bc2a0b79ee75d486d8c64af965e5b29_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b8aa74c5b2635a6d3413eeac6fc0f6eb9a2e459089aaabbf626ea3ef92a67ce0_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:5e3a6a447579e6a46c0b2ecd6600ac91a7db29c9beac6572c34898eb75ad9adf_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a3d79c954d3ab0a488fc16992fb4a6166e11e74198241b2a8432cbc6b5a5291b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d314b014726586ffac5871a5de4ae8c44c9ae9ad66b8d3d7d141904d5dd98718_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:0c95660d70d43250ed9a8020e0c3a824764b517fdc1e052a0a0c9293d6a6eccf_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9bd435c7a788405fbe848fc4af8ca2f06892f9a57b5ae45f2aabb75730e599c5_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a1686339b8076c93b4804f74e7662eaa79e645bad5169543388d4f0ee94223bc_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:37a54cb73b9f7ebf35d105ff2eceb245b4b5d6a17cd59b2231340732a20d1300_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:4e723c745572096f6b8ad9be2824cab346b2368f3c1a7c3f932b5ff07352e98e_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ecee959ff9f8941775cc2215ff1f422b150d504e54be989a7ae34b51d0fee1d5_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:2703de775b2ba3d918b2ef2e793e50483ec79b4548a9b805a0038229ef4e2c05_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:783380361431859301477dfe63b6915240e934ffd07a2af2651094579be47a15_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:bf4365ef885ac75a4fb267b4ff0f78b0a4a66fbc6989e08d26d2fff2303cc037_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9b5704ad2378faa18549f903f1c1aa9eba16400cd4870024a502167b94d16266_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f91346c06de18304d2069173dff6acbf6579e48102653200606e9bd03bf1dc3f_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f9c9389872049907df9dc7a608fea46b556e81d74cb614977efada54fd38c8a4_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:4a004584fa6c7187481e8c8480f17e0e4edd18c32f52a2e271c68d02f1a9655f_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:6ef1cc4866f961a819a86807d87f05d450a885c86576bddbcd02f5409725842e_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:869e00b7d0f624d9a4f49ccb3575fc9c9aeb02d65334cc4f1780be0568ece9eb_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c5aa967417f760b93bbd93ddf33f137440b0270c46bf00099773bf2ae88512e4_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:f4051caccc2b3480e5f56449d775b093ddef5976366448cb97cb7f3639e81e7c_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:fe30a0c9fab208974711a6d8bddcc7118d3398bccd76bfc0b925f4536b92414e_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:0006f9e6699c201a49405ab0def316f485f701fe8b6154a94509b0a9c16c60c3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:5db65b09004a74967eb7786c461534bf54e779bc0e2c0e19856c2dc23899780b_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:db70080447d7363de20d90f64a38d7338ee971c30c17c92fe810a7b1e993ca12_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:14521"
        },
        {
          "category": "workaround",
          "details": "Prevent users, specially unprivileged or untrusted users, to execute hyperloglog operations by using ACL to restrict hyperloglog commands.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:1ee661a128ff7a4ca9fe33f2cefe7d17f3aed9b56865b0c6ede43cd3d87750a4_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:1f24ed706144287fd1107374b211f9e2bc954f396f17772ab60fd96c17cab47f_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:31f1254d001ea74644b68f51b0ca7f467f5c06d942e5f4f6e09e560dc8c592c2_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:16980744b4d7dc06bb2fb6111c5ce8bd99fa56c71fa03d7930556a470d9eb736_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8a1eae2af0f39b3590addbf4d92987651bc2a0b79ee75d486d8c64af965e5b29_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b8aa74c5b2635a6d3413eeac6fc0f6eb9a2e459089aaabbf626ea3ef92a67ce0_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:5e3a6a447579e6a46c0b2ecd6600ac91a7db29c9beac6572c34898eb75ad9adf_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a3d79c954d3ab0a488fc16992fb4a6166e11e74198241b2a8432cbc6b5a5291b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d314b014726586ffac5871a5de4ae8c44c9ae9ad66b8d3d7d141904d5dd98718_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:0c95660d70d43250ed9a8020e0c3a824764b517fdc1e052a0a0c9293d6a6eccf_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9bd435c7a788405fbe848fc4af8ca2f06892f9a57b5ae45f2aabb75730e599c5_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a1686339b8076c93b4804f74e7662eaa79e645bad5169543388d4f0ee94223bc_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:37a54cb73b9f7ebf35d105ff2eceb245b4b5d6a17cd59b2231340732a20d1300_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:4e723c745572096f6b8ad9be2824cab346b2368f3c1a7c3f932b5ff07352e98e_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ecee959ff9f8941775cc2215ff1f422b150d504e54be989a7ae34b51d0fee1d5_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:2703de775b2ba3d918b2ef2e793e50483ec79b4548a9b805a0038229ef4e2c05_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:783380361431859301477dfe63b6915240e934ffd07a2af2651094579be47a15_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:bf4365ef885ac75a4fb267b4ff0f78b0a4a66fbc6989e08d26d2fff2303cc037_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9b5704ad2378faa18549f903f1c1aa9eba16400cd4870024a502167b94d16266_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f91346c06de18304d2069173dff6acbf6579e48102653200606e9bd03bf1dc3f_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f9c9389872049907df9dc7a608fea46b556e81d74cb614977efada54fd38c8a4_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:4a004584fa6c7187481e8c8480f17e0e4edd18c32f52a2e271c68d02f1a9655f_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:6ef1cc4866f961a819a86807d87f05d450a885c86576bddbcd02f5409725842e_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:869e00b7d0f624d9a4f49ccb3575fc9c9aeb02d65334cc4f1780be0568ece9eb_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c5aa967417f760b93bbd93ddf33f137440b0270c46bf00099773bf2ae88512e4_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:f4051caccc2b3480e5f56449d775b093ddef5976366448cb97cb7f3639e81e7c_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:fe30a0c9fab208974711a6d8bddcc7118d3398bccd76bfc0b925f4536b92414e_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:0006f9e6699c201a49405ab0def316f485f701fe8b6154a94509b0a9c16c60c3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:5db65b09004a74967eb7786c461534bf54e779bc0e2c0e19856c2dc23899780b_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:db70080447d7363de20d90f64a38d7338ee971c30c17c92fe810a7b1e993ca12_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:1ee661a128ff7a4ca9fe33f2cefe7d17f3aed9b56865b0c6ede43cd3d87750a4_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:1f24ed706144287fd1107374b211f9e2bc954f396f17772ab60fd96c17cab47f_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:31f1254d001ea74644b68f51b0ca7f467f5c06d942e5f4f6e09e560dc8c592c2_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:16980744b4d7dc06bb2fb6111c5ce8bd99fa56c71fa03d7930556a470d9eb736_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:8a1eae2af0f39b3590addbf4d92987651bc2a0b79ee75d486d8c64af965e5b29_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b8aa74c5b2635a6d3413eeac6fc0f6eb9a2e459089aaabbf626ea3ef92a67ce0_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:5e3a6a447579e6a46c0b2ecd6600ac91a7db29c9beac6572c34898eb75ad9adf_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:a3d79c954d3ab0a488fc16992fb4a6166e11e74198241b2a8432cbc6b5a5291b_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d314b014726586ffac5871a5de4ae8c44c9ae9ad66b8d3d7d141904d5dd98718_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:0c95660d70d43250ed9a8020e0c3a824764b517fdc1e052a0a0c9293d6a6eccf_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9bd435c7a788405fbe848fc4af8ca2f06892f9a57b5ae45f2aabb75730e599c5_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a1686339b8076c93b4804f74e7662eaa79e645bad5169543388d4f0ee94223bc_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:37a54cb73b9f7ebf35d105ff2eceb245b4b5d6a17cd59b2231340732a20d1300_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:4e723c745572096f6b8ad9be2824cab346b2368f3c1a7c3f932b5ff07352e98e_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ecee959ff9f8941775cc2215ff1f422b150d504e54be989a7ae34b51d0fee1d5_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:2703de775b2ba3d918b2ef2e793e50483ec79b4548a9b805a0038229ef4e2c05_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:783380361431859301477dfe63b6915240e934ffd07a2af2651094579be47a15_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:bf4365ef885ac75a4fb267b4ff0f78b0a4a66fbc6989e08d26d2fff2303cc037_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9b5704ad2378faa18549f903f1c1aa9eba16400cd4870024a502167b94d16266_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f91346c06de18304d2069173dff6acbf6579e48102653200606e9bd03bf1dc3f_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f9c9389872049907df9dc7a608fea46b556e81d74cb614977efada54fd38c8a4_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:4a004584fa6c7187481e8c8480f17e0e4edd18c32f52a2e271c68d02f1a9655f_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:6ef1cc4866f961a819a86807d87f05d450a885c86576bddbcd02f5409725842e_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:869e00b7d0f624d9a4f49ccb3575fc9c9aeb02d65334cc4f1780be0568ece9eb_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c5aa967417f760b93bbd93ddf33f137440b0270c46bf00099773bf2ae88512e4_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:f4051caccc2b3480e5f56449d775b093ddef5976366448cb97cb7f3639e81e7c_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:fe30a0c9fab208974711a6d8bddcc7118d3398bccd76bfc0b925f4536b92414e_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:0006f9e6699c201a49405ab0def316f485f701fe8b6154a94509b0a9c16c60c3_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:5db65b09004a74967eb7786c461534bf54e779bc0e2c0e19856c2dc23899780b_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:db70080447d7363de20d90f64a38d7338ee971c30c17c92fe810a7b1e993ca12_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability"
    }
  ]
}

CVE-2025-32023 (GCVE-0-2025-32023)

Vulnerability from cvelistv5 – Published: 2025-07-07 15:22 – Updated: 2026-02-04 19:26

Title

Redis allows out of bounds writes in hyperloglog commands leading to RCE

Summary

Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing hyperloglog operations. This can be done using ACL to restrict HLL commands.

Severity

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-07 15:43 UTC

CWE

CWE-680 - Integer Overflow to Buffer Overflow

Assigner

GitHub_M mitre root

References

7 references

URL	Tags
https://github.com/redis/redis/security/advisorie…	x_refsource_CONFIRM
https://github.com/redis/redis/commit/50188747cbf…	x_refsource_MISC
https://github.com/redis/redis/releases/tag/6.2.19	x_refsource_MISC
https://github.com/redis/redis/releases/tag/7.2.10	x_refsource_MISC
https://github.com/redis/redis/releases/tag/7.4.5	x_refsource_MISC
https://github.com/redis/redis/releases/tag/8.0.3	x_refsource_MISC
https://www.exploit-db.com/exploits/52477

Impacted products

1 product

Vendor	Product	Version
redis	redis	Affected: >= 8.0.0, < 8.0.3 Affected: >= 7.4-rc1, < 7.4.5 Affected: >= 7.0.0, < 7.2.10 Affected: >= 2.8.0, < 6.2.19

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-32023",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-07T15:43:02.576291Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-07T15:43:15.696Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-02-04T19:26:46.239Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.exploit-db.com/exploits/52477"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "redis",
          "vendor": "redis",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 8.0.0, \u003c 8.0.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 7.4-rc1, \u003c 7.4.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 7.0.0, \u003c 7.2.10"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.8.0, \u003c 6.2.19"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing hyperloglog operations. This can be done using ACL to restrict HLL commands."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-680",
              "description": "CWE-680: Integer Overflow to Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-07T15:22:19.155Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43"
        },
        {
          "name": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/6.2.19",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/6.2.19"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/7.2.10",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/7.2.10"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/7.4.5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/7.4.5"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/8.0.3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/8.0.3"
        }
      ],
      "source": {
        "advisory": "GHSA-rp2m-q4j6-gr43",
        "discovery": "UNKNOWN"
      },
      "title": "Redis allows out of bounds writes in hyperloglog commands leading to RCE"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-32023",
    "datePublished": "2025-07-07T15:22:19.155Z",
    "dateReserved": "2025-04-01T21:57:32.955Z",
    "dateUpdated": "2026-02-04T19:26:46.239Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.