RHSA-2026:22299
Vulnerability from csaf_redhat - Published: 2026-06-01 07:21 - Updated: 2026-06-25 00:10Summary
Red Hat Security Advisory: Red Hat OpenShift Developer Tools - Source-to-Image 1.6.2
Severity
Moderate
Notes
Topic: Red Hat OpenShift Developer Tools - Source-to-Image 1.6.2
Details: Red Hat OpenShift Developer Tools - Source-to-Image 1.6.2 release
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
20 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Developer Tools - Source-to-Image 1.6.2",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Developer Tools - Source-to-Image 1.6.2 release",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:22299",
"url": "https://access.redhat.com/errata/RHSA-2026:22299"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22299.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Developer Tools - Source-to-Image 1.6.2",
"tracking": {
"current_release_date": "2026-06-25T00:10:22+00:00",
"generator": {
"date": "2026-06-25T00:10:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.0.0"
}
},
"id": "RHSA-2026:22299",
"initial_release_date": "2026-06-01T07:21:37+00:00",
"revision_history": [
{
"date": "2026-06-01T07:21:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-01T07:21:44+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-25T00:10:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift Developer Tools and Services 1.6.2",
"product": {
"name": "OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:source_to_image:1.6::el8"
}
}
}
],
"category": "product_family",
"name": "OpenShift Developer Tools and Services"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel8@sha256%3A365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f?arch=amd64\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel8\u0026tag=1780247935"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel9@sha256%3Aaea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7?arch=amd64\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel9\u0026tag=1780247727"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel8@sha256%3A5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871?arch=arm64\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel8\u0026tag=1780247935"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel9@sha256%3Af201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee?arch=arm64\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel9\u0026tag=1780247727"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel8@sha256%3A627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21?arch=ppc64le\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel8\u0026tag=1780247935"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel9@sha256%3Ab1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb?arch=ppc64le\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel9\u0026tag=1780247727"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel8@sha256%3A6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e?arch=s390x\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel8\u0026tag=1780247935"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x",
"product": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x",
"product_id": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x",
"product_identification_helper": {
"purl": "pkg:oci/source-to-image-rhel9@sha256%3Ac5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019?arch=s390x\u0026repository_url=registry.redhat.io/source-to-image/source-to-image-rhel9\u0026tag=1780247727"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64 as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64 as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64 as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64 as a component of OpenShift Developer Tools and Services 1.6.2",
"product_id": "OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64"
},
"product_reference": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64",
"relates_to_product_reference": "OpenShift Developer Tools and Services 1.6.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-01T07:21:37+00:00",
"details": "It is recommended that existing users of Source-to-Image (S2I) upgrade to 1.6.2. There are no changes to any data structures or API\u2019s included within this release.",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:22299"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-01T07:21:37+00:00",
"details": "It is recommended that existing users of Source-to-Image (S2I) upgrade to 1.6.2. There are no changes to any data structures or API\u2019s included within this release.",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:22299"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:365451b37b74743f123684976d01bee50f3342feed9a538eb1f64d630e99325f_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:5b1a38089985b74754dfeb0888e32af42f6808d647c28f37ddf8db72aa77a871_arm64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:627567b8f0dff2b752da7618db040d5dc16e836bfc84aa8618e24930f9754d21_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:6bc0e8e3035dea680fd63b81c6b2a83f7b046ece14d32e0c886d3699e9a78f3e_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:aea2f22b7f61cb32fb82ccde987e8bc36d49c88ae91181fcc6787a6e352c7ee7_amd64",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:b1a02de0dc3ee11c2919f056e6db377fe2df608c82a6dced1af1ea1a230276bb_ppc64le",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c5a7a5418f3e94573f8357e9f324d5ca5030f22b8d9450995ade1f1a5d722019_s390x",
"OpenShift Developer Tools and Services 1.6.2:registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:f201d7a4151149fe66c6a8acfd12ef0a41bd856a3733520439bea3e044dc12ee_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…