{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multicluster Global Hub v1.7.1 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:24503",
        "url": "https://access.redhat.com/errata/RHSA-2026:24503"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-41118",
        "url": "https://access.redhat.com/security/cve/CVE-2025-41118"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-21728",
        "url": "https://access.redhat.com/security/cve/CVE-2026-21728"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33813",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33813"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33815",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33815"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33816",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33816"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34040",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34040"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-40293",
        "url": "https://access.redhat.com/security/cve/CVE-2026-40293"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-40890",
        "url": "https://access.redhat.com/security/cve/CVE-2026-40890"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41602",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41602"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-43869",
        "url": "https://access.redhat.com/security/cve/CVE-2026-43869"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24503.json"
      }
    ],
    "title": "Red Hat Security Advisory: Multicluster Global Hub 1.7.1 security update",
    "tracking": {
      "current_release_date": "2026-06-08T19:13:58+00:00",
      "generator": {
        "date": "2026-06-08T19:13:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.2"
        }
      },
      "id": "RHSA-2026:24503",
      "initial_release_date": "2026-06-08T14:02:51+00:00",
      "revision_history": [
        {
          "date": "2026-06-08T14:02:51+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-08T14:03:01+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-08T19:13:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Multicluster Global Hub 1.7.1",
                "product": {
                  "name": "Multicluster Global Hub 1.7.1",
                  "product_id": "Multicluster Global Hub 1.7.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Multicluster Global Hub"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1779925273"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1780361828"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1780615638"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3A6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1780616828"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1779887500"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1779815431"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1779925273"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1780361828"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Ab811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1780615638"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1779887500"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Ad509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1779815431"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1779925273"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1780361828"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1780615638"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1779887500"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1779815431"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1779925273"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Af49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1780361828"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1780615638"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Adfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1779887500"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
                "product": {
                  "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
                  "product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1779815431"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64 as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64 as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64 as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64 as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64 as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64 as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64 as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64 as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64 as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64 as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64 as a component of Multicluster Global Hub 1.7.1",
          "product_id": "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
        },
        "product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64",
        "relates_to_product_reference": "Multicluster Global Hub 1.7.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-41118",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "discovery_date": "2026-04-15T20:02:03.347892+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458796"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Pyroscope. When Tencent Cloud Object Storage (COS) is configured as the storage backend, an attacker with access to the Pyroscope API can extract the `secret_key` value in plaintext. This issue leads to sensitive information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyroscope: sensitive COS SecretKey exposed in plaintext via configuration API due to missing type protection",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw allows an attacker with direct access to the Pyroscope API to extract the Tencent Cloud Object Storage (COS) `secret_key` in plaintext when COS is configured as the storage backend. Due to this reason, this vulnerability has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-41118"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458796",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458796"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-41118",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-41118"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-41118",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41118"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2025-41118",
          "url": "https://grafana.com/security/security-advisories/cve-2025-41118"
        }
      ],
      "release_date": "2026-04-15T19:15:17.689000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T14:02:51+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24503"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, limit network exposure of the Pyroscope API so it is only accessible by trusted users on the internal network.",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyroscope: sensitive COS SecretKey exposed in plaintext via configuration API due to missing type protection"
    },
    {
      "cve": "CVE-2026-21728",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-24T09:00:58.144273+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461395"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Tempo. A remote attacker can exploit this vulnerability by sending large queries to the Tempo service. This can lead to excessive memory allocations, potentially causing a Denial of Service (DoS) by impacting the availability of the service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana/tempo: Tempo: Denial of Service via large queries",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-21728"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461395",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461395"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-21728",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-21728"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21728",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21728"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/cve-2026-21728",
          "url": "https://grafana.com/security/security-advisories/cve-2026-21728"
        }
      ],
      "release_date": "2026-04-24T08:00:47.074000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T14:02:51+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24503"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "grafana/tempo: Tempo: Denial of Service via large queries"
    },
    {
      "cve": "CVE-2026-32281",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-04-08T02:01:00.930989+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456333"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456333",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/758061",
          "url": "https://go.dev/cl/758061"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78281",
          "url": "https://go.dev/issue/78281"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4946",
          "url": "https://pkg.go.dev/vuln/GO-2026-4946"
        }
      ],
      "release_date": "2026-04-08T01:06:58.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T14:02:51+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24503"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
    },
    {
      "cve": "CVE-2026-32282",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-04-08T02:01:12.683211+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763761",
          "url": "https://go.dev/cl/763761"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78293",
          "url": "https://go.dev/issue/78293"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4864",
          "url": "https://pkg.go.dev/vuln/GO-2026-4864"
        }
      ],
      "release_date": "2026-04-08T01:06:55.953000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T14:02:51+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24503"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
    },
    {
      "cve": "CVE-2026-33813",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-21T20:01:02.224363+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460221"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/image. A remote attacker could exploit this vulnerability by providing a specially crafted WEBP image with an invalid, large size. This could cause the application to panic and crash on 32-bit platforms, leading to a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33813"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460221",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460221"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33813",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33813"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33813",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33813"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/759860",
          "url": "https://go.dev/cl/759860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78407",
          "url": "https://go.dev/issue/78407"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4961",
          "url": "https://pkg.go.dev/vuln/GO-2026-4961"
        }
      ],
      "release_date": "2026-04-21T19:21:27.644000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T14:02:51+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24503"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing"
    },
    {
      "cve": "CVE-2026-33815",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-04-07T16:01:25.130006+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455975"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33815"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455975",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4771",
          "url": "https://pkg.go.dev/vuln/GO-2026-4771"
        }
      ],
      "release_date": "2026-04-07T15:19:24.344000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T14:02:51+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24503"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
    },
    {
      "cve": "CVE-2026-33816",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-04-07T16:01:14.142946+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455972"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33816"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455972",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4772",
          "url": "https://pkg.go.dev/vuln/GO-2026-4772"
        }
      ],
      "release_date": "2026-04-07T15:19:24.529000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T14:02:51+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24503"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
    },
    {
      "cve": "CVE-2026-34040",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-03-31T03:01:34.530713+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2453278"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Moby, an open-source container framework. This security vulnerability allows attackers to bypass authorization plugins (AuthZ), which are mechanisms designed to control access and permissions within the container environment. The bypass of these plugins can lead to unauthorized operations and potential compromise of the system\u0027s integrity and confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Moby: Moby: Authorization bypass vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34040"
        },
        {
          "category": "external",
          "summary": "RHBZ#2453278",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453278"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34040",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34040"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34040",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34040"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/moby/releases/tag/docker-v29.3.1",
          "url": "https://github.com/moby/moby/releases/tag/docker-v29.3.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2",
          "url": "https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2"
        }
      ],
      "release_date": "2026-03-31T01:36:48.205000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T14:02:51+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24503"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Moby: Moby: Authorization bypass vulnerability"
    },
    {
      "cve": "CVE-2026-40293",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "discovery_date": "2026-04-17T22:01:37.276056+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2459341"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenFGA, an authorization/permission engine. When OpenFGA is configured to use preshared-key authentication and the built-in playground is enabled and accessible beyond localhost or trusted networks, a remote attacker can exploit this vulnerability. The local server includes the preshared API key in the HTML response of the /playground endpoint, leading to information disclosure of the API key. This can allow unauthorized access to the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenFGA: github.com/openfga/openfga: OpenFGA: Information disclosure of preshared API key via playground endpoint",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important information disclosure flaw in OpenFGA, an authorization engine used in Red Hat products. The vulnerability occurs when OpenFGA is configured with preshared-key authentication and its built-in playground is enabled and exposed beyond localhost or trusted networks. The /playground endpoint, intended for development, can then reveal the preshared API key, potentially leading to unauthorized access.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40293"
        },
        {
          "category": "external",
          "summary": "RHBZ#2459341",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459341"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40293",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40293"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40293",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40293"
        },
        {
          "category": "external",
          "summary": "https://github.com/openfga/openfga/releases/tag/v1.14.0",
          "url": "https://github.com/openfga/openfga/releases/tag/v1.14.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/openfga/openfga/security/advisories/GHSA-68m9-983m-f3v5",
          "url": "https://github.com/openfga/openfga/security/advisories/GHSA-68m9-983m-f3v5"
        }
      ],
      "release_date": "2026-04-17T20:47:06.804000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T14:02:51+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24503"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenFGA: github.com/openfga/openfga: OpenFGA: Information disclosure of preshared API key via playground endpoint"
    },
    {
      "cve": "CVE-2026-40890",
      "cwe": {
        "id": "CWE-1286",
        "name": "Improper Validation of Syntactic Correctness of Input"
      },
      "discovery_date": "2026-04-21T20:02:56.729456+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460245"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in github.com/gomarkdown/markdown, a Go library for parsing Markdown text and rendering as HTML. A remote attacker could exploit this vulnerability by providing a specially crafted malformed input. Specifically, input containing a \u0027\u003c\u0027 character not followed by a \u0027\u003e\u0027 character, when processed by the SmartypantsRenderer, can lead to an out-of-bounds read or a panic. This can result in a denial of service (DoS) for the application, making it unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/gomarkdown/markdown: github.com/gomarkdown/markdown: Denial of Service via malformed Markdown input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw affecting Red Hat products that utilize the `github.com/gomarkdown/markdown` library. The vulnerability occurs when the `SmartypantsRenderer` processes specially crafted malformed Markdown input containing an unclosed \u0027\u003c\u0027 character, leading to an out-of-bounds read or application panic. A successful exploitation may lead the application using the library unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40890"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460245",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460245"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40890",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40890"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40890",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40890"
        },
        {
          "category": "external",
          "summary": "https://github.com/gomarkdown/markdown/commit/759bbc3e32073c3bc4e25969c132fc520eda2778",
          "url": "https://github.com/gomarkdown/markdown/commit/759bbc3e32073c3bc4e25969c132fc520eda2778"
        },
        {
          "category": "external",
          "summary": "https://github.com/gomarkdown/markdown/security/advisories/GHSA-77fj-vx54-gvh7",
          "url": "https://github.com/gomarkdown/markdown/security/advisories/GHSA-77fj-vx54-gvh7"
        }
      ],
      "release_date": "2026-04-21T19:51:53.237000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T14:02:51+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24503"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/gomarkdown/markdown: github.com/gomarkdown/markdown: Denial of Service via malformed Markdown input"
    },
    {
      "cve": "CVE-2026-41602",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-28T10:01:16.099816+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463407"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Apache Thrift TFramedTransport Go language implementation. This integer overflow or wraparound vulnerability could potentially allow an attacker to cause unexpected behavior or resource exhaustion, leading to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41602"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463407",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463407"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41602",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41602"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41602",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41602"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/28/6",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/28/6"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",
          "url": "https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql"
        }
      ],
      "release_date": "2026-04-28T09:19:06.646000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T14:02:51+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24503"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation"
    },
    {
      "cve": "CVE-2026-43869",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-05-05T08:00:56.417384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466660"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This vulnerability involves improper validation of a certificate with a host mismatch, which could allow a remote attacker to bypass security checks. By presenting a specially crafted certificate, an attacker may impersonate a legitimate server or client. This could lead to a security bypass, potentially enabling unauthorized access or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache Thrift: Apache Thrift: Security bypass due to improper certificate validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
        ],
        "known_not_affected": [
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
          "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43869"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466660",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466660"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43869"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/3hsgl1b69wzq3ry39scqbv2dhyl3j52r",
          "url": "https://lists.apache.org/thread/3hsgl1b69wzq3ry39scqbv2dhyl3j52r"
        }
      ],
      "release_date": "2026-05-05T07:25:48.611000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-08T14:02:51+00:00",
          "details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:24503"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:117a8c83568dc190f011469ea39c35ed1a16a7040397b092675e08c0630b3688_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:368e38ef2cb6f7ae5a39d8802785bc1e2ea406650f0f1572425ee9e473f7dd23_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58d6a46e506128186ff995a3f4cace3c4644bf6dfe6aa686aa120c1948a16241_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f49ddb5fcea92e6361346508380cab45bc6228c151354d247e17d9700e82d58e_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0d6c621066cdc9c428c9286b7dd8ce0eed831de27b385c17e3761a1d411e034b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1f04b37cd35946131e8dd90bcec49796ae6f431d4a800b5c6de8162ab6fe0d8e_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3a7f09a334a51b8f8d2da9871cc28d29de6c32cdfa12ccd38f43d101f18dcfff_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:90153b5c4c5deeb7abadc7ac8ebb96b9ac72825ef609e8a172cb6866f3db351d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:056a115b19ecc05e38b2211e7adcddd4bb8e691c8403598391816db8d2f29178_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3b6012d3ae4ca3c074f6a9895c7c46e3cb7c55dbbd48b2118eabe228eb06fcb1_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:54eb853bc03d77214dfc4110f6880f90b5d0b2a509941c3a0ce20e73ab978952_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b811ad761dc45e80c61a409685f0cb18d0d87378339363185b46d56b191c7e07_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:6ef843cb38796a93ecd60deafbb6fb902f5d6d93a38023d2af736d5942f410f5_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:31dc2fb94d13afd25570799ae1a1504e918eb55d79d6360a4576f3ec14ca82f6_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7a010c71fb5d894642c4feeb8dd841e9be0745cdadc206407be15f245895f949_arm64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:8d2f906d14238270d146c26c4dc54f8e219fe0b3ac2311312173fcc75af7101b_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d509da45ed3ead45ff85dcb8d1d88883cc815a6cd2cbdba18e813448e859c490_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0a3e487b8271091ee4e2f5ba71475c8986592f9c634974e2a319e05a15d566bb_s390x",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4063ad90ef97f9e81e8f75803f64cec8a72d3dc43dfc0dd58e3f6731b4dcef8d_amd64",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9f50860471c0cb8176d3d9354877313976ee871922326547ecb8ee869e81ca61_ppc64le",
            "Multicluster Global Hub 1.7.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dfdd95b60e0ba33c068a4b1b02442b908b383695dffefb6cefd7a6f738986d9d_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache Thrift: Apache Thrift: Security bypass due to improper certificate validation"
    }
  ]
}