Vulnerability-Lookup

RHSA-2026:24359

Vulnerability from csaf_redhat - Published: 2026-06-08 05:19 - Updated: 2026-06-09 08:30

Summary

Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.3

Severity

Important

Notes

Topic: Red Hat OpenShift Builds 1.7.3

Details: Releases of Red Hat OpenShift Builds 1.7.3

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-32280

A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le	—	Vendor Fix fix

Known not affected 33 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x		—
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64		—

Threats

Impact Important

CVE-2026-40161

A flaw was found in Tekton Pipelines. A tenant with permissions to create TaskRun or PipelineRun resources can exploit this vulnerability. By omitting the Git API token parameter and pointing the serverURL to an attacker-controlled endpoint, the system-configured Git API token (such as a GitHub Personal Access Token or GitLab token) can be sent to the attacker. This information disclosure allows for the exfiltration of sensitive API tokens.

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 24 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64	—	Vendor Fix fix Workaround

Known not affected 13 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64	—	Workaround

Threats

Impact Moderate

CVE-2026-40938

A flaw was found in Tekton Pipelines, a system for declaring continuous integration/continuous delivery (CI/CD) pipelines. An authenticated user, able to submit `ResolutionRequest` objects, can exploit a vulnerability by injecting malicious commands into the git resolver's revision parameter. This allows for the execution of unauthorized programs on the resolver pod. Successful exploitation can lead to the exfiltration of all cluster-wide secrets, resulting in significant information disclosure.

8.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 28 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64	—	Vendor Fix fix Workaround

Known not affected 9 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64	—	Workaround

Threats

Impact Important

References

28 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:24359	self
https://access.redhat.com/security/cve/CVE-2026-32280	external
https://access.redhat.com/security/cve/CVE-2026-40161	external
https://access.redhat.com/security/cve/CVE-2026-40938	external
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/builds_f…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-32280	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456339	external
https://www.cve.org/CVERecord?id=CVE-2026-32280	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32280	external
https://go.dev/cl/758320	external
https://go.dev/issue/78282	external
https://groups.google.com/g/golang-announce/c/0uY…	external
https://pkg.go.dev/vuln/GO-2026-4947	external
https://access.redhat.com/security/cve/CVE-2026-40161	self
https://bugzilla.redhat.com/show_bug.cgi?id=2460173	external
https://www.cve.org/CVERecord?id=CVE-2026-40161	external
https://nvd.nist.gov/vuln/detail/CVE-2026-40161	external
https://github.com/tektoncd/pipeline/issues/9608	external
https://github.com/tektoncd/pipeline/issues/9609	external
https://github.com/tektoncd/pipeline/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-40938	self
https://bugzilla.redhat.com/show_bug.cgi?id=2460292	external
https://www.cve.org/CVERecord?id=CVE-2026-40938	external
https://nvd.nist.gov/vuln/detail/CVE-2026-40938	external
https://github.com/tektoncd/pipeline/releases/tag…	external
https://github.com/tektoncd/pipeline/security/adv…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Builds 1.7.3",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Releases of Red Hat OpenShift Builds 1.7.3",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:24359",
        "url": "https://access.redhat.com/errata/RHSA-2026:24359"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32280"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-40161",
        "url": "https://access.redhat.com/security/cve/CVE-2026-40161"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-40938",
        "url": "https://access.redhat.com/security/cve/CVE-2026-40938"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.7",
        "url": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.7"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24359.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.3",
    "tracking": {
      "current_release_date": "2026-06-09T08:30:07+00:00",
      "generator": {
        "date": "2026-06-09T08:30:07+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.2"
        }
      },
      "id": "RHSA-2026:24359",
      "initial_release_date": "2026-06-08T05:19:34+00:00",
      "revision_history": [
        {
          "date": "2026-06-08T05:19:34+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-08T05:19:39+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-09T08:30:07+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Builds 1.7.3",
                "product": {
                  "name": "Red Hat OpenShift Builds 1.7.3",
                  "product_id": "Red Hat OpenShift Builds 1.7.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_builds:1.7::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Builds"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3Aa286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1780373846"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1780374151"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1780373867"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Aba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1780373835"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1780480839"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3Afcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-operator-bundle\u0026tag=1780485589"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Af4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1780477299"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ae1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1780477295"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1780374228"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3Ab2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1780374084"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1780373846"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1780374151"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Aa2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1780373867"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1780373835"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Ac176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1780480839"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Acbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1780477299"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1780477295"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1780374228"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1780374084"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1780373846"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Acdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1780374151"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Abd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1780373867"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1780373835"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1780480839"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ad1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1780477299"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Adce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1780477295"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Ab83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1780374228"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1780374084"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3Adfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9\u0026tag=1780373846"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9\u0026tag=1780374151"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9\u0026tag=1780373867"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Acc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9\u0026tag=1780373835"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator\u0026tag=1780480839"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9\u0026tag=1780477299"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Aa406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9\u0026tag=1780477295"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9\u0026tag=1780374228"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
                  "product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9\u0026tag=1780374084"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
          "product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-32280",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-08T02:01:19.572351+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456339"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456339",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/758320",
          "url": "https://go.dev/cl/758320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78282",
          "url": "https://go.dev/issue/78282"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4947",
          "url": "https://pkg.go.dev/vuln/GO-2026-4947"
        }
      ],
      "release_date": "2026-04-08T01:06:58.595000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T05:19:34+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.2 upgrade to 1.7.3",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24359"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
    },
    {
      "cve": "CVE-2026-40161",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-04-21T17:02:07.015859+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460173"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Tekton Pipelines. A tenant with permissions to create TaskRun or PipelineRun resources can exploit this vulnerability. By omitting the Git API token parameter and pointing the serverURL to an attacker-controlled endpoint, the system-configured Git API token (such as a GitHub Personal Access Token or GitLab token) can be sent to the attacker. This information disclosure allows for the exfiltration of sensitive API tokens.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure of Git API token via user-controlled serverURL",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate impact information disclosure flaw affects Tekton Pipelines. A user with permissions to create TaskRun or PipelineRun resources could exfiltrate the system-configured Git API token by directing the serverURL to an attacker-controlled endpoint and omitting the token parameter. This vulnerability doesn\u0027t affect a couple of Red Hat supported products as it\u0027s using a Pipelines version previously from 1.0.0, where the affected code is not present.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40161"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460173",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460173"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40161",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40161"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40161",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40161"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/issues/9608",
          "url": "https://github.com/tektoncd/pipeline/issues/9608"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/issues/9609",
          "url": "https://github.com/tektoncd/pipeline/issues/9609"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-wjxp-xrpv-xpff",
          "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-wjxp-xrpv-xpff"
        }
      ],
      "release_date": "2026-04-21T16:26:27.381000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T05:19:34+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.2 upgrade to 1.7.3",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24359"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, ensure that the Git API token parameter is always explicitly provided when configuring Tekton Pipelines. Additionally, restrict permissions for creating TaskRun or PipelineRun resources to only trusted users to limit the attack surface. Review and enforce policies that prevent the use of user-controlled serverURLs without proper token authentication. Configuration changes may require a restart or reload of affected services to take effect.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure of Git API token via user-controlled serverURL"
    },
    {
      "cve": "CVE-2026-40938",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-04-21T21:02:16.557479+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460292"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Tekton Pipelines, a system for declaring continuous integration/continuous delivery (CI/CD) pipelines. An authenticated user, able to submit `ResolutionRequest` objects, can exploit a vulnerability by injecting malicious commands into the git resolver\u0027s revision parameter. This allows for the execution of unauthorized programs on the resolver pod. Successful exploitation can lead to the exfiltration of all cluster-wide secrets, resulting in significant information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/tektoncd/pipeline: Tekton Pipelines: Arbitrary code execution and secret exfiltration via malicious git commands",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in Tekton Pipelines allows an authenticated user to achieve arbitrary code execution on the resolver pod by injecting malicious commands into the git resolver\u0027s revision parameter. This vulnerability happens because the `revision` parameter is passed as a positional argument to the `git fetch` command without any previous validation whether the parameter\u0027s value doesn\u0027t start with `-` character. Combining this lack of validation with the fact the function which validates the repository URL explicitly allows a repository URL to being with `/`, translating to a local filesystem. An attacker with enough privileges to perform an operation which trigger resolvers to use the `ResolutionRequest` function can \nchain both behaviors to trick Tekton Pipelines to load and execute an arbitrary binary on the resolver pod.\n\nExploring this vulnerability may be considered of a high complexity as an attacker needs to either know an existing valid git repository located at a predicable path already in the resolver pod or a default URL configuration pointing to a local filesystem\u0027s path.\n \nA successful exploitation of the flaw can lead to the exfiltration of all cluster-wide secrets, posing a significant risk to the integrity and confidentiality of the OpenShift environment. Additionally, depending on the data included in the `kubeconfig` files, an attacker may achieve privilege escalation or perform lateral movements within the targeted cluster.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
          "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40938"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460292",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460292"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40938",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40938"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40938",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40938"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1",
          "url": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq",
          "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq"
        }
      ],
      "release_date": "2026-04-21T20:45:24.658000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T05:19:34+00:00",
          "details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.2 upgrade to 1.7.3",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24359"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:18f00b5d62bd5526f80dbe2cb380e677c0f84953b762b3edb41d3e380e04eaf5_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:67f18db03a40270705bffb37c866250aa2418621f0b5128ebf34d9b7ab3df803_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:a286b64da40c2fefa4e4f67249e138409395168f03028d30a2f1cf765440974d_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:dfb8f5b7d5b2a4dbd83b6585d49f53b11c439bcd2d150144edba9fc08e0fe724_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:350e159561c341a69daf928466c64cf1936d4937af62a3a0378c7dfe65949365_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6eaac6f9f219963aac92099fcf2ab0291d5c0c68cc9070c06c1d122531349802_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:92b94a5e69841aedd2ac577ab8a286ec4ded35ffabed478fdf9ab32fdf4fbb6f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:cdf06172d9ecf62be5a86eef680a6a1e1198b75a6f14c8b9cc7d52c06076d44e_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:07a5fd537dd60ddc9a05766e2c8f4d7f407b2e7914cf0f60a83b4361e934e215_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3b9bfd2d1f0c9917c65ba84cb26182522de4be3a6e34f4aa6a092c84c97518bc_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a2485063e14fa8478f05f8a04c1fd43d402b38f8b5a24836ff389711f51f60f9_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:bd6d2fed0ba96d6583b796370ce0949de210ead5505e60a33204a27b3c6cde2d_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54a6a27410eabdbbeafd4137e74c1f9312bde27fa345ec4753693ed633668472_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9bb9d6a35d2acbee9db6770e11894647b57c6c27d5a32944c21b26f382a4d6b5_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ba720079d59c9b351c7b1ec156d5e3ebabeafcae862f5e86294f0563351f7b65_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:cc8bcc436c5e22a1a870599f673dc8cfca8a3d8970b620b8499ec78c207825bb_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:fcb0d4599ec7124f8185715d681d5f3e0d7a904f4544d107c5a8294de425a89f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:351c74c3fd8d6c79909f8789d457a0e7695dc5a48da0329f0b903a8d76847d4f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5725324b6605bd242e64288df723c0c28dde50b10a1cec48fea7486d74b5782f_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5a3ce7b8f6bb5b8e485c5efaadff958e4e356dd7e3c9fdbc608686e688703f17_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c176b6a935420ca95e609241c03c3d4fc1beca73f1e8e3b6c45f7bb27c9c775e_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:503492d3bab8d86f320aca4850c732f7497655b3bb73d6e82031f8c5e592fec1_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:cbc806ef024057021397991e60becb5f19f85831d131ff7fe9cbdf967d15217c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d1733e18d64f81a3b24e145fcd7612e050faeb53e209018b1454d72d3d84c73b_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f4431461400983fa84667867de5ae0fd254e89c0924c5135440bfe49f53c2c5a_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0436a253c41145169babd1378dfa9215748133fd2ab69d31bd0f173301476e1c_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:a406fa897dfbf19b06a540ab504d774dcd6ab96a821e525771c04c894032ae49_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:dce347a369087dcc0584821af5924fa627d9f00bf3eba5fe8cf94d1dba404ff4_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e1da05467b3e168877435d5c5fff498844793476a4e93e9a0945ea07bd243475_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:14eadfc84ff3891dc935eee3c9553a2c2c7f1b446a123feb02df8f4dff18638f_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2255b1556ac0b266991359df0882fdee8c6c0cc4193a2a77159db0696153020a_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:2b9d139f846cf2f606be0e2498cc74473396d8da623f6b7d87e7c55c54e143d2_amd64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b83fb75af5101ee00f32957f1532702e3a58498330cc4d16d4d4f05ef6bd97dc_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:80b9b77db840ace9ba84c3d47b081fdc812be4572d7d476a9eee4b8d446e0ae9_ppc64le",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8c5090cb83361e280a8069c97252bde7d695d241fc01db975428e5f32ed180c1_arm64",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:9f14cf2bbd46f58fb2f3745e8df20e3f3f6cd68395f9b9505bddb896ff900273_s390x",
            "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b2cd0295f34620305f2a8ef2ca1e07166f8c565a5162ef3717f810de638e4643_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/tektoncd/pipeline: Tekton Pipelines: Arbitrary code execution and secret exfiltration via malicious git commands"
    }
  ]
}

CVE-2026-32280 (GCVE-0-2026-32280)

Vulnerability from cvelistv5 – Published: 2026-04-08 01:06 – Updated: 2026-04-08 17:46

Title

Unexpected work during chain building in crypto/x509

Summary

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

References

4 references

URL	Tags
https://go.dev/cl/758320
https://go.dev/issue/78282
https://groups.google.com/g/golang-announce/c/0uY…
https://pkg.go.dev/vuln/GO-2026-4947

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/x509	Affected: 0 , < 1.25.9 (semver) Affected: 1.26.0-0 , < 1.26.2 (semver)

Credits

Jakub Ciolek - https://ciolek.dev

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-32280",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-08T17:46:14.569488Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-08T17:46:47.347Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "Certificate.buildChains"
            },
            {
              "name": "Certificate.Verify"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.2",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek - https://ciolek.dev"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T01:06:58.595Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/758320"
        },
        {
          "url": "https://go.dev/issue/78282"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4947"
        }
      ],
      "title": "Unexpected work during chain building in crypto/x509"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-32280",
    "datePublished": "2026-04-08T01:06:58.595Z",
    "dateReserved": "2026-03-11T16:38:46.555Z",
    "dateUpdated": "2026-04-08T17:46:47.347Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40161 (GCVE-0-2026-40161)

Vulnerability from cvelistv5 – Published: 2026-04-21 16:26 – Updated: 2026-05-21 21:20

Title

Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL

Summary

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, the Tekton Pipelines git resolver in API mode sends the system-configured Git API token to a user-controlled serverURL when the user omits the token parameter. A tenant with TaskRun or PipelineRun create permission can exfiltrate the shared API token (GitHub PAT, GitLab token, etc.) by pointing serverURL to an attacker-controlled endpoint. Versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1 fix the issue.

Severity

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-201 - Insertion of Sensitive Information Into Sent Data

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/tektoncd/pipeline/security/adv…	x_refsource_CONFIRM
https://github.com/tektoncd/pipeline/issues/9608	x_refsource_MISC
https://github.com/tektoncd/pipeline/issues/9609	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
tektoncd	pipeline	Affected: >= 1.0.0, < 1.0.2 Affected: >= 1.2.0, < 1.3.4 Affected: >= 1.4.0, < 1.6.2 Affected: >= 1.7.0, < 1.9.3 Affected: >= 1.10.0, < 1.11.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40161",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-21T17:41:32.164689Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-21T17:41:38.895Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pipeline",
          "vendor": "tektoncd",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.0.0, \u003c 1.0.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.2.0, \u003c 1.3.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.4.0, \u003c 1.6.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.7.0, \u003c 1.9.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.10.0, \u003c 1.11.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, the Tekton Pipelines git resolver in API mode sends the system-configured Git API token to a user-controlled serverURL when the user omits the token parameter. A tenant with TaskRun or PipelineRun create permission can exfiltrate the shared API token (GitHub PAT, GitLab token, etc.) by pointing serverURL to an attacker-controlled endpoint. Versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-201",
              "description": "CWE-201: Insertion of Sensitive Information Into Sent Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-21T21:20:13.227Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-wjxp-xrpv-xpff",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-wjxp-xrpv-xpff"
        },
        {
          "name": "https://github.com/tektoncd/pipeline/issues/9608",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/tektoncd/pipeline/issues/9608"
        },
        {
          "name": "https://github.com/tektoncd/pipeline/issues/9609",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/tektoncd/pipeline/issues/9609"
        }
      ],
      "source": {
        "advisory": "GHSA-wjxp-xrpv-xpff",
        "discovery": "UNKNOWN"
      },
      "title": "Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-40161",
    "datePublished": "2026-04-21T16:26:27.381Z",
    "dateReserved": "2026-04-09T19:31:56.014Z",
    "dateUpdated": "2026-05-21T21:20:13.227Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40938 (GCVE-0-2026-40938)

Vulnerability from cvelistv5 – Published: 2026-04-21 20:45 – Updated: 2026-05-21 22:40

Title

Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE

Summary

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, the git resolver's revision parameter is passed directly as a positional argument to git fetch without any validation that it does not begin with a - character. Because git parses flags from mixed positional arguments, an attacker can inject arbitrary git fetch flags such as --upload-pack=<binary>. Combined with the validateRepoURL function explicitly permitting URLs that begin with / (local filesystem paths), a tenant who can submit ResolutionRequest objects can chain these two behaviors to execute an arbitrary binary on the resolver pod. The tekton-pipelines-resolvers ServiceAccount holds cluster-wide get/list/watch on all Secrets, so code execution on the resolver pod enables full cluster-wide secret exfiltration. Versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1 fix the issue.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/tektoncd/pipeline/security/adv…	x_refsource_CONFIRM
https://github.com/tektoncd/pipeline/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
tektoncd	pipeline	Affected: >= 1.0.0, < 1.0.2 Affected: >= 1.2.0, < 1.3.4 Affected: >= 1.4.0, < 1.6.2 Affected: >= 1.7.0, < 1.9.3 Affected: >= 1.10.0, < 1.11.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40938",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-22T18:31:54.871943Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-22T18:36:16.790Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pipeline",
          "vendor": "tektoncd",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.0.0, \u003c 1.0.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.2.0, \u003c 1.3.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.4.0, \u003c 1.6.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.7.0, \u003c 1.9.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.10.0, \u003c 1.11.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, the git resolver\u0027s revision parameter is passed directly as a positional argument to git fetch without any validation that it does not begin with a - character. Because git parses flags from mixed positional arguments, an attacker can inject arbitrary git fetch flags such as --upload-pack=\u003cbinary\u003e. Combined with the validateRepoURL function explicitly permitting URLs that begin with / (local filesystem paths), a tenant who can submit ResolutionRequest objects can chain these two behaviors to execute an arbitrary binary on the resolver pod. The tekton-pipelines-resolvers ServiceAccount holds cluster-wide get/list/watch on all Secrets, so code execution on the resolver pod enables full cluster-wide secret exfiltration. Versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1 fix the issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-88",
              "description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-21T22:40:09.754Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-94jr-7pqp-xhcq"
        },
        {
          "name": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1"
        }
      ],
      "source": {
        "advisory": "GHSA-94jr-7pqp-xhcq",
        "discovery": "UNKNOWN"
      },
      "title": "Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-40938",
    "datePublished": "2026-04-21T20:45:24.658Z",
    "dateReserved": "2026-04-15T20:40:15.518Z",
    "dateUpdated": "2026-05-21T22:40:09.754Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:24359

CVE-2026-32280 (GCVE-0-2026-32280)

CVE-2026-40161 (GCVE-0-2026-40161)

CVE-2026-40938 (GCVE-0-2026-40938)

Tags

Sightings

Nomenclature