Vulnerability-Lookup

RHSA-2026:25123

Vulnerability from csaf_redhat - Published: 2026-06-10 19:42 - Updated: 2026-06-10 21:23

Summary

Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.28.2 Release.

Severity

Important

Notes

Topic: Red Hat OpenShift Dev Spaces 3.28.2 has been released.

Details: This release provides security fixes for Dev Spaces components. https://access.redhat.com/support/policy/updates/openshift#crw

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-6321

A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64	—	Vendor Fix fix

Known not affected 57 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64		—

Threats

Impact Important

CVE-2026-42578

A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected behavior or potential bypass of security controls on the proxy server.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x	—	Vendor Fix fix

Known not affected 49 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64		—

Threats

Impact Important

CVE-2026-42579

A flaw was found in Netty. Netty's DNS (Domain Name System) codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the encoder through user-influenced hostnames, leading to a high integrity impact on the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-1286 - Improper Validation of Syntactic Correctness of Input

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x	—	Vendor Fix fix

Known not affected 49 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64		—

Threats

Impact Important

CVE-2026-42581

A flaw was found in Netty's HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both `Transfer-Encoding: chunked` and `Content-Length` headers. While Netty correctly strips the conflicting `Content-Length` header for HTTP/1.1 messages, this guard is absent for HTTP/1.0. This can lead to HTTP request smuggling, where downstream proxies or handlers may misinterpret message boundaries, potentially allowing an attacker to bypass security controls or access unauthorized information.

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x	—	Vendor Fix fix

Known not affected 49 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64		—

Threats

Impact Important

CVE-2026-42584

A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker could exploit this vulnerability by sending a specific sequence of HTTP responses (103, followed by a 200 with a GET body, then another 200 for a HEAD request) when the client pipelines GET then HEAD requests. This can cause the HttpClientCodec to incorrectly pair responses, leading to subsequent HTTP responses being parsed from the wrong offset. This issue may result in information disclosure or other data integrity problems due to misinterpretation of network traffic.

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x	—	Vendor Fix fix

Known not affected 49 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64		—

Threats

Impact Important

CVE-2026-42587

A flaw was found in Netty. A remote attacker can bypass the configured decompression limit in the HttpContentDecompressor by sending a specially crafted compressed payload using Brotli (br), Zstandard (zstd), or Snappy content encodings. This can lead to unbounded memory allocation, resulting in an out-of-memory Denial of Service (DoS) for the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x	—	Vendor Fix fix Workaround

Known not affected 49 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64	—	Workaround

Threats

Impact Important

CVE-2026-43512

A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password "null". This allows a remote attacker to bypass security controls.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-303 - Incorrect Implementation of Authentication Algorithm

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x	—	Vendor Fix fix Workaround

Known not affected 57 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64	—	Workaround

Threats

Impact Moderate

References

47 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:25123	self
https://access.redhat.com/documentation/en-us/red…	external
https://access.redhat.com/security/cve/CVE-2026-42578	external
https://access.redhat.com/security/cve/CVE-2026-42579	external
https://access.redhat.com/security/cve/CVE-2026-42581	external
https://access.redhat.com/security/cve/CVE-2026-42584	external
https://access.redhat.com/security/cve/CVE-2026-42587	external
https://access.redhat.com/security/cve/CVE-2026-43512	external
https://access.redhat.com/security/cve/CVE-2026-6321	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-6321	self
https://bugzilla.redhat.com/show_bug.cgi?id=2466582	external
https://www.cve.org/CVERecord?id=CVE-2026-6321	external
https://nvd.nist.gov/vuln/detail/CVE-2026-6321	external
https://cna.openjsf.org/security-advisories.html	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-42578	self
https://bugzilla.redhat.com/show_bug.cgi?id=2477226	external
https://www.cve.org/CVERecord?id=CVE-2026-42578	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42578	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-42579	self
https://bugzilla.redhat.com/show_bug.cgi?id=2477217	external
https://www.cve.org/CVERecord?id=CVE-2026-42579	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42579	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-42581	self
https://bugzilla.redhat.com/show_bug.cgi?id=2477232	external
https://www.cve.org/CVERecord?id=CVE-2026-42581	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42581	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-42584	self
https://bugzilla.redhat.com/show_bug.cgi?id=2477224	external
https://www.cve.org/CVERecord?id=CVE-2026-42584	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42584	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-42587	self
https://bugzilla.redhat.com/show_bug.cgi?id=2477220	external
https://www.cve.org/CVERecord?id=CVE-2026-42587	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42587	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-43512	self
https://bugzilla.redhat.com/show_bug.cgi?id=2476511	external
https://www.cve.org/CVERecord?id=CVE-2026-43512	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43512	external
https://lists.apache.org/thread/7x09x7o12solvclsl…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Dev Spaces 3.28.2 has been released.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release provides security fixes for Dev Spaces components.  \nhttps://access.redhat.com/support/policy/updates/openshift#crw",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:25123",
        "url": "https://access.redhat.com/errata/RHSA-2026:25123"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.28/html/administration_guide/installing-devspaces",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.28/html/administration_guide/installing-devspaces"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42578",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42578"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42579",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42579"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42581",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42581"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42584",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42584"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42587",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42587"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-43512",
        "url": "https://access.redhat.com/security/cve/CVE-2026-43512"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-6321",
        "url": "https://access.redhat.com/security/cve/CVE-2026-6321"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25123.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.28.2 Release.",
    "tracking": {
      "current_release_date": "2026-06-10T21:23:45+00:00",
      "generator": {
        "date": "2026-06-10T21:23:45+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.2"
        }
      },
      "id": "RHSA-2026:25123",
      "initial_release_date": "2026-06-10T19:42:14+00:00",
      "revision_history": [
        {
          "date": "2026-06-10T19:42:14+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-10T19:42:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-10T21:23:45+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Dev Spaces 3.28",
                "product": {
                  "name": "Red Hat OpenShift Dev Spaces 3.28",
                  "product_id": "Red Hat OpenShift Dev Spaces 3.28",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_devspaces:3.28::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Dev Spaces"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/code-rhel9@sha256%3A9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/code-rhel9\u0026tag=1780679565"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/code-sshd-rhel9@sha256%3A0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/code-sshd-rhel9\u0026tag=1780678593"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/configbump-rhel9@sha256%3A7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/configbump-rhel9\u0026tag=1780548550"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dashboard-rhel9@sha256%3Aca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/dashboard-rhel9\u0026tag=1780685176"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/imagepuller-rhel9@sha256%3Af1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/imagepuller-rhel9\u0026tag=1780573614"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9\u0026tag=1780608672"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/multicluster-redirector-rhel9\u0026tag=1780695724"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openvsx-rhel9@sha256%3Aaf397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/openvsx-rhel9\u0026tag=1780948325"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/devspaces-rhel9-operator@sha256%3A4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/devspaces-rhel9-operator\u0026tag=1780592394"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pluginregistry-rhel9@sha256%3Afbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9\u0026tag=1780696380"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/server-rhel9@sha256%3Ae2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/server-rhel9\u0026tag=1780694994"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/traefik-rhel9@sha256%3A1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/traefik-rhel9\u0026tag=1780593759"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/udi-rhel9@sha256%3A763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/udi-rhel9\u0026tag=1780929707"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/udi-base-rhel10@sha256%3A224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel10\u0026tag=1780600267"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
                  "product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/udi-base-rhel9@sha256%3A505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel9\u0026tag=1780601703"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
                  "product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/code-rhel9@sha256%3A7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/code-rhel9\u0026tag=1780679565"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
                  "product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/code-sshd-rhel9@sha256%3A324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/code-sshd-rhel9\u0026tag=1780678593"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
                  "product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/configbump-rhel9@sha256%3Ab52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/configbump-rhel9\u0026tag=1780548550"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
                  "product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dashboard-rhel9@sha256%3Adee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/dashboard-rhel9\u0026tag=1780685176"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
                  "product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/imagepuller-rhel9@sha256%3A21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/imagepuller-rhel9\u0026tag=1780573614"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
                  "product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9\u0026tag=1780608672"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
                  "product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/multicluster-redirector-rhel9\u0026tag=1780695724"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
                  "product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openvsx-rhel9@sha256%3A3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/openvsx-rhel9\u0026tag=1780948325"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
                  "product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/devspaces-rhel9-operator@sha256%3A4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/devspaces-rhel9-operator\u0026tag=1780592394"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
                  "product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pluginregistry-rhel9@sha256%3A06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9\u0026tag=1780696380"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
                  "product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/server-rhel9@sha256%3A4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/server-rhel9\u0026tag=1780694994"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
                  "product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/traefik-rhel9@sha256%3A0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/traefik-rhel9\u0026tag=1780593759"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64",
                  "product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/udi-rhel9@sha256%3A8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/udi-rhel9\u0026tag=1780929707"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
                  "product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/udi-base-rhel10@sha256%3Acb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel10\u0026tag=1780600267"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
                "product": {
                  "name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
                  "product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/udi-base-rhel9@sha256%3A93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2?arch=arm64\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel9\u0026tag=1780601703"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
                  "product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/code-sshd-rhel9@sha256%3Ab1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/code-sshd-rhel9\u0026tag=1780678593"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
                  "product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/code-rhel9@sha256%3Abb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/code-rhel9\u0026tag=1780679565"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
                  "product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/configbump-rhel9@sha256%3A5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/configbump-rhel9\u0026tag=1780548550"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
                  "product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dashboard-rhel9@sha256%3A1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/dashboard-rhel9\u0026tag=1780685176"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
                  "product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/imagepuller-rhel9@sha256%3A2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/imagepuller-rhel9\u0026tag=1780573614"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
                  "product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9\u0026tag=1780608672"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
                  "product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3Abaff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/multicluster-redirector-rhel9\u0026tag=1780695724"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
                  "product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openvsx-rhel9@sha256%3Ab73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/openvsx-rhel9\u0026tag=1780948325"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
                  "product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/devspaces-rhel9-operator@sha256%3Add4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/devspaces-rhel9-operator\u0026tag=1780592394"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
                  "product_id": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/devspaces-operator-bundle@sha256%3Af78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/devspaces-operator-bundle\u0026tag=1780937740"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
                  "product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pluginregistry-rhel9@sha256%3A80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9\u0026tag=1780696380"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
                  "product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/server-rhel9@sha256%3A56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/server-rhel9\u0026tag=1780694994"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
                  "product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/traefik-rhel9@sha256%3A6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/traefik-rhel9\u0026tag=1780593759"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
                  "product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/udi-rhel9@sha256%3A80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/udi-rhel9\u0026tag=1780929707"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
                  "product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/udi-base-rhel10@sha256%3Ac10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel10\u0026tag=1780600267"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
                "product": {
                  "name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
                  "product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/udi-base-rhel9@sha256%3A2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411?arch=amd64\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel9\u0026tag=1780601703"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
                  "product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/code-rhel9@sha256%3A83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/code-rhel9\u0026tag=1780679565"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
                  "product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/code-sshd-rhel9@sha256%3A82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/code-sshd-rhel9\u0026tag=1780678593"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
                  "product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/configbump-rhel9@sha256%3A62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/configbump-rhel9\u0026tag=1780548550"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
                  "product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dashboard-rhel9@sha256%3Aae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/dashboard-rhel9\u0026tag=1780685176"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
                  "product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/imagepuller-rhel9@sha256%3A5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/imagepuller-rhel9\u0026tag=1780573614"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
                  "product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9\u0026tag=1780608672"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
                  "product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3Ae9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/multicluster-redirector-rhel9\u0026tag=1780695724"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
                  "product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openvsx-rhel9@sha256%3Acef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/openvsx-rhel9\u0026tag=1780948325"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
                  "product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/devspaces-rhel9-operator@sha256%3Aa5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/devspaces-rhel9-operator\u0026tag=1780592394"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
                  "product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pluginregistry-rhel9@sha256%3Aa062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9\u0026tag=1780696380"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
                  "product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/server-rhel9@sha256%3Af8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/server-rhel9\u0026tag=1780694994"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
                  "product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/traefik-rhel9@sha256%3A1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/traefik-rhel9\u0026tag=1780593759"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
                  "product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/udi-rhel9@sha256%3A2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/udi-rhel9\u0026tag=1780929707"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
                  "product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/udi-base-rhel10@sha256%3A1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel10\u0026tag=1780600267"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
                "product": {
                  "name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
                  "product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/udi-base-rhel9@sha256%3A06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b?arch=s390x\u0026repository_url=registry.redhat.io/devspaces/udi-base-rhel9\u0026tag=1780601703"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x"
        },
        "product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le"
        },
        "product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64"
        },
        "product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28",
          "product_id": "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
        },
        "product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64",
        "relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.28"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-6321",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-05-04T20:01:14.938426+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466582"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6321"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466582",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466582"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6321",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6321"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6"
        }
      ],
      "release_date": "2026-05-04T19:31:57.253000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-10T19:42:14+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:25123"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies"
    },
    {
      "cve": "CVE-2026-42578",
      "cwe": {
        "id": "CWE-93",
        "name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
      },
      "discovery_date": "2026-05-13T19:02:00.826936+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477226"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected behavior or potential bypass of security controls on the proxy server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42578"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477226",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477226"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42578",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42578"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42578",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42578"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr"
        }
      ],
      "release_date": "2026-05-13T17:57:43.538000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-10T19:42:14+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:25123"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation"
    },
    {
      "cve": "CVE-2026-42579",
      "cwe": {
        "id": "CWE-1286",
        "name": "Improper Validation of Syntactic Correctness of Input"
      },
      "discovery_date": "2026-05-13T19:01:25.062732+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477217"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty. Netty\u0027s DNS (Domain Name System) codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the encoder through user-influenced hostnames, leading to a high integrity impact on the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important integrity flaw in Netty\u0027s DNS codec. The vulnerability arises from insufficient enforcement of RFC 1035 domain name constraints during both encoding and decoding, allowing remote attackers to manipulate DNS responses or user-controlled hostnames. This could lead to a high integrity impact on affected Red Hat products that utilize the vulnerable Netty DNS codec.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42579"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477217",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477217"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42579",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42579"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42579",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42579"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm"
        }
      ],
      "release_date": "2026-05-13T18:01:52.500000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-10T19:42:14+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:25123"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement"
    },
    {
      "cve": "CVE-2026-42581",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2026-05-13T19:02:26.404511+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477232"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty\u0027s HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both `Transfer-Encoding: chunked` and `Content-Length` headers. While Netty correctly strips the conflicting `Content-Length` header for HTTP/1.1 messages, this guard is absent for HTTP/1.0. This can lead to HTTP request smuggling, where downstream proxies or handlers may misinterpret message boundaries, potentially allowing an attacker to bypass security controls or access unauthorized information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. Netty\u0027s HttpObjectDecoder, used across various Red Hat products, improperly handles conflicting `Transfer-Encoding: chunked` and `Content-Length` headers in HTTP/1.0 requests. This allows a remote attacker to perform HTTP request smuggling, potentially bypassing security controls or gaining unauthorized access to information due to misinterpretation of message boundaries by downstream proxies or handlers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42581"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477232",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477232"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42581",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42581"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42581",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42581"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9"
        }
      ],
      "release_date": "2026-05-13T17:54:44.492000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-10T19:42:14+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:25123"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers"
    },
    {
      "cve": "CVE-2026-42584",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2026-05-13T19:01:51.846351+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477224"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker could exploit this vulnerability by sending a specific sequence of HTTP responses (103, followed by a 200 with a GET body, then another 200 for a HEAD request) when the client pipelines GET then HEAD requests. This can cause the HttpClientCodec to incorrectly pair responses, leading to subsequent HTTP responses being parsed from the wrong offset. This issue may result in information disclosure or other data integrity problems due to misinterpretation of network traffic.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: A flaw in Netty\u0027s HttpClientCodec allows a remote attacker to cause data confusion. By sending a specially crafted sequence of HTTP responses, an attacker can cause subsequent HTTP responses to be parsed incorrectly, potentially leading to information disclosure or data integrity issues in applications utilizing Netty for HTTP client operations. This vulnerability affects various Red Hat products that bundle Netty, including Red Hat AMQ, Enterprise Application Platform, Red Hat Build of Quarkus, and Red Hat Build of Keycloak.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42584"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477224",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477224"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42584",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42584"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42584",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42584"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3"
        }
      ],
      "release_date": "2026-05-13T18:10:48.437000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-10T19:42:14+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:25123"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion"
    },
    {
      "cve": "CVE-2026-42587",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-05-13T19:01:35.415881+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477220"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty. A remote attacker can bypass the configured decompression limit in the HttpContentDecompressor by sending a specially crafted compressed payload using Brotli (br), Zstandard (zstd), or Snappy content encodings. This can lead to unbounded memory allocation, resulting in an out-of-memory Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in Netty\u0027s HTTP content decompression. A remote attacker can exploit this flaw by sending specially crafted compressed payloads using Brotli, Zstandard, or Snappy encodings, bypassing configured decompression limits. This leads to unbounded memory allocation, potentially causing an out-of-memory condition and rendering affected Red Hat systems unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42587"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477220",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477220"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42587",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42587"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42587",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42587"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv"
        }
      ],
      "release_date": "2026-05-13T18:22:21.699000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-10T19:42:14+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:25123"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression"
    },
    {
      "cve": "CVE-2026-43512",
      "cwe": {
        "id": "CWE-303",
        "name": "Incorrect Implementation of Authentication Algorithm"
      },
      "discovery_date": "2026-05-12T16:01:26.008892+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2476511"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password \"null\". This allows a remote attacker to bypass security controls.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate flaw in Apache Tomcat allows an authentication bypass when DIGEST authentication is configured. An attacker can authenticate as any unknown user by providing the password \u0027null\u0027, potentially gaining unauthorized access to applications protected by DIGEST authentication. Red Hat products are only affected if they are configured to use DIGEST authentication, which is not a common, out of the box and expected configuration for Production environments. \n\nFurthermore, because the unknown user is not mapped to any valid realm roles, their access is still restricted by standard application authorization constraints, significantly limiting the actual impact.\n\nThe unknown user is not mapped to any existing user, which means, it does not steal credentials nor impersonate an existing user. This new user is expected to have the minimum possible authentication and authorization range within the realm inherited roles.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
          "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2476511",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476511"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43512"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/7x09x7o12solvclslw3sz0288xc8wx73",
          "url": "https://lists.apache.org/thread/7x09x7o12solvclslw3sz0288xc8wx73"
        }
      ],
      "release_date": "2026-05-12T15:24:02.424000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-10T19:42:14+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:25123"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, disable DIGEST authentication within Apache Tomcat if it is not essential for your environment. This involves modifying the server\u0027s authentication configuration to utilize alternative methods or remove the DIGEST realm. A service restart is required for these changes to take effect and may impact functionality relying on DIGEST authentication.",
          "product_ids": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:7e20cd1d638296bcab93a704bfce3ff7cf6c0f7e632e07e69fcacfedf9e8b120_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:83e1013b0ce89c1f4fc0038c1cb7eab2fd541a6fb1de6a0596fe669a76cde1f4_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:9d47eee451c3d7c7a0c2d83824849ac4053110107997a41df26fe28f9b4749de_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-rhel9@sha256:bb9e332650eb73ce20accc25d8bc73bb935e39e0bc6a9b0e7b163707ae25ce6f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:0ce3e6baa0af251b5ae5e8cc64de363aa144c420e1416a2a7bf522aefe0b6dd3_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:324758a4c214f743ba3f38eee3ae2c3f42eac80ac4c10801e103fc531d73cf51_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:82994d108c21e3f53c2d87bdec8ddcdb0c0f81c7f1ed93ac996fe83046ea8ed1_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:b1b3d7416bc5c1609fa890229fc0a0809bc1906813bb4834f57dc610f88974c1_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:5bcd49999db0f7ac5fbc2461c7ac50dec267ee8b4f64c95bdcd746188ab0bfa0_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:62ecbc41b3f1d3cd81e9593fdacac8397d1fc3f616717b247346ac218b7a2ff7_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:7ee3d2e13995479495aa2a2f3b7a8f8133f7b69d0e753b00e3fe2ee00416b3a9_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/configbump-rhel9@sha256:b52e83ecc17aefda4a83671c267b3086bb5f92d78259c3e3b2b389042bac7230_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ae7dc192f8ca8c78dc6eb12ef2846b45057e22e183207743aad9261fb5adcb6e_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:ca07c7ae5cdcf93df21348d92c4828e4615b324f2f765907b3459f0d5090c628_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/dashboard-rhel9@sha256:dee20a799ccf5bae94ed50fd2d79ea162cd7384990427db93281fe590d6c7767_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:f78d91e983f0f8be019382c2fb620a655bf9f8204bd839e9bfb9c35e1ab8fc90_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4757ac1e8c5a53e2d9a7ce896dbcc1232806a47a29470285c6fee9778a2f0b25_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:4e4a72be08cf691ee40dc79d2e625a5b59cf709e15219537ee04a1f03a3df23e_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:a5b3c16ca82c2585debbef262d8de80bb8566384c916915d9fce92d233268d1c_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dd4b506d04a2e7be2c62c53a7e1f60fe828ba7f0fc2aab7f6a752f1a4c4e699b_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:21d1288562fc757e4714cde2c253c077fba1b7762ab4041e8b3f55d9da1e7b82_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:2423f169dcd795c9326d59d953b4507485bf2ef8971f066969dfb2ca921bdf1f_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:5e4c074f39614f529e79c8de011446a0b621fb189485eff0061f95f99f0950f8_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:f1cf981295bdfddb68c8cb83e03da7cbec9aada7dce16586a1508351b11c2e73_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0de97d2e0e6589cfd3889eca0284154e857c4deef4ab45420e0d75bfc8030252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:12a042cb9e94c6502b61c6d08a49bc8b81f8d3e23932b08c29566906508801d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:25137cf516214eac04d5f1fd2ad9a38658e8fc741600b50b4c44f00db437cf01_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:5cb0df6d628f764eead0f67206b7251b737932ae04f81dd8c1fd416d2c1be455_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:060059363ac7718e9599e0612c95b583b563fac5a6616dfecc9c42413b2a3f56_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1bd73bae94af4a5be1b62e555df3a1b863f22c427f95d2bbbd24e4ffcce7a264_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:baff02ec968933899873d989d8faf4fb27aedcbca5406009408638678a832b96_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:e9347202b67b4a2ad17b820af7148d4473764996ce1368d5460b6fff2d79935a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:3eda021137370af8e8cf2c996a7a10733824f1d23e56534efd4f46aa40ce7777_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:af397f83a7394b676299501672623ca9c01b8351db0d73531b0bf325e55558f6_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b73dc3b1ac96a877aba609233dc0ae60685716b272e3dc1f8db59c23c438049d_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/openvsx-rhel9@sha256:cef4269f4d91814bc144c94718d6aa59c4e03eab341eebf87ec05e38e7b7e49f_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:06d061cdda5ac9ddd48647c2c86b5ceb5a5f25acc7e314ebb319a690af588209_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:80842e498a91358d73a511ec25acc2a6d26dca76c9f775108778700e8541c252_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:a062fd2a510100fc03a5f14102104a34b2e24bddc5661ac95ed39dad6a5f46b9_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fbdf611c5aac4e33644ed8eb5a72b88b5c5a6690f24a64a3cff7002a483827d8_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:4f63b37a50013481f95ca70ea3e0baf257601aa86ba6dd3efe5ad039b3170f04_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:56f4b3132a1785e7a323fc9fb5e1d2040d30a7c8d81fd00a42d619a8881e9492_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:e2d0551322d379e77a72218fb37244f8a187e6ff52ae6f61e7b673c2c23ce39f_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/server-rhel9@sha256:f8200f2b4b8c5cb5a5aef1fa6f8f15297cb720512a0df784629129afc0d5810a_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:0912cc02b70a7cc6895cdfde15647865de99f03880715c6b8e584adf70c14707_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1d4269b06d396a7ec1e952daa47a4bd5b00915d6d0cd5a3270fe471a6a75517b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:1e2b5bff8974b54038cf635faaa293458bcfa2e75a9ee57e2712b30d9b35e0ac_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/traefik-rhel9@sha256:6798e67f7d39b831b6c947a50c4420c9d92160079bbd2d62d07b9f991be4abfd_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:1a56d8592fe048ebe0c1549ec0249a5f61842cbb5c58545649b394df98fbae06_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:224939e501ffed4ffe09a5198138486e72b04d1486787a6c4c3abee8cd7dffba_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:c10a24ed873306c38e5d7aa96d9ffa9b71b2e6dac2ee18f557af008ef460d708_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel10@sha256:cb73c78e8214996408490b36f176be3b6d0047a116f705478afd162c8260292d_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:06172d66fc92096c6d1b517ac2edfc35e06255859152ea8aa83ea57bb789bb0b_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:2268f482a70624ca1670675df27f0a6a4e7ea41669f021059ebafbc0465d5411_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:505295ab2811eb723a334501a853eb238c2ec96073f36296226d58fa12aefd3c_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-base-rhel9@sha256:93ae4574a68c0f16acf2146ab09b56e446fd012697c1194cfa9f4ac717a300c2_arm64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:2f672c4b1bc77639a5ccf2f7f923691aefe2ab2e6e76de830a0727633c80af17_s390x",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:763e7470768ecf6551d9d9af7a7a48605ceafaad3e001f48ae08ce94d6facb42_ppc64le",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:80c9c0c3aa02ae7b447c33a8bb9aff07fc243b2b484db28975b79b9007612629_amd64",
            "Red Hat OpenShift Dev Spaces 3.28:registry.redhat.io/devspaces/udi-rhel9@sha256:8a4c7ae0ffaa1f6d3b87c60d27817a3d1636a5609cf159dce66d80c2f0ad6f9b_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication"
    }
  ]
}

CVE-2026-42578 (GCVE-0-2026-42578)

Vulnerability from cvelistv5 – Published: 2026-05-13 17:57 – Updated: 2026-05-13 18:37

Title

Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

Summary

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's HttpProxyHandler constructs HTTP CONNECT requests with header validation explicitly disabled. The newInitialMessage() method creates headers using DefaultHttpHeadersFactory.headersFactory().withValidation(false), then adds user-provided outboundHeaders without any CRLF validation. This allows an attacker who can influence the outbound headers to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.

Severity

2.9 (Low)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/netty/netty/security/advisorie…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
netty	netty	Affected: >= 4.2.0.Alpha1, < 4.2.13.Final Affected: < 4.1.133.Final

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42578",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T18:36:58.234828Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-13T18:37:18.204Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "netty",
          "vendor": "netty",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.2.0.Alpha1, \u003c 4.2.13.Final"
            },
            {
              "status": "affected",
              "version": "\u003c 4.1.133.Final"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty\u0027s HttpProxyHandler constructs HTTP CONNECT requests with header validation explicitly disabled. The newInitialMessage() method creates headers using DefaultHttpHeadersFactory.headersFactory().withValidation(false), then adds user-provided outboundHeaders without any CRLF validation. This allows an attacker who can influence the outbound headers to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 2.9,
            "baseSeverity": "LOW",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-113",
              "description": "CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T17:57:43.538Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr"
        }
      ],
      "source": {
        "advisory": "GHSA-45q3-82m4-75jr",
        "discovery": "UNKNOWN"
      },
      "title": "Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-42578",
    "datePublished": "2026-05-13T17:57:43.538Z",
    "dateReserved": "2026-04-28T17:26:12.085Z",
    "dateUpdated": "2026-05-13T18:37:18.204Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42579 (GCVE-0-2026-42579)

Vulnerability from cvelistv5 – Published: 2026-05-13 18:01 – Updated: 2026-05-18 15:40

Title

Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)

Summary

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit the decoder, and user-influenced hostnames can exploit the encoder. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-20 - Improper Input Validation
CWE-400 - Uncontrolled Resource Consumption
CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/netty/netty/security/advisorie…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
netty	netty	Affected: >= 4.2.0.Alpha1, < 4.2.13.Final Affected: < 4.1.133.Final

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42579",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-18T15:39:59.449891Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-18T15:40:22.534Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "netty",
          "vendor": "netty",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.2.0.Alpha1, \u003c 4.2.13.Final"
            },
            {
              "status": "affected",
              "version": "\u003c 4.1.133.Final"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty\u0027s DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit the decoder, and user-influenced hostnames can exploit the encoder. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-626",
              "description": "CWE-626: Null Byte Interaction Error (Poison Null Byte)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:01:52.500Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm"
        }
      ],
      "source": {
        "advisory": "GHSA-cm33-6792-r9fm",
        "discovery": "UNKNOWN"
      },
      "title": "Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-42579",
    "datePublished": "2026-05-13T18:01:52.500Z",
    "dateReserved": "2026-04-28T17:26:12.085Z",
    "dateUpdated": "2026-05-18T15:40:22.534Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42581 (GCVE-0-2026-42581)

Vulnerability from cvelistv5 – Published: 2026-05-13 17:54 – Updated: 2026-05-13 18:42

Title

Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization

Summary

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpObjectDecoder strips a conflicting Content-Length header when a request carries both Transfer-Encoding: chunked and Content-Length, but only for HTTP/1.1 messages. The guard is absent for HTTP/1.0. An attacker that sends an HTTP/1.0 request with both headers causes Netty to decode the body as chunked while leaving Content-Length intact in the forwarded HttpMessage. Any downstream proxy or handler that trusts Content-Length over Transfer-Encoding will disagree on message boundaries, enabling request smuggling. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.

Severity

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/netty/netty/security/advisorie…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
netty	netty	Affected: >= 4.2.0.Alpha1, < 4.2.13.Final Affected: < 4.1.133.Final

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42581",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T18:42:38.397208Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-13T18:42:59.711Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "netty",
          "vendor": "netty",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.2.0.Alpha1, \u003c 4.2.13.Final"
            },
            {
              "status": "affected",
              "version": "\u003c 4.1.133.Final"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpObjectDecoder strips a conflicting Content-Length header when a request carries both Transfer-Encoding: chunked and Content-Length, but only for HTTP/1.1 messages. The guard is absent for HTTP/1.0. An attacker that sends an HTTP/1.0 request with both headers causes Netty to decode the body as chunked while leaving Content-Length intact in the forwarded HttpMessage. Any downstream proxy or handler that trusts Content-Length over Transfer-Encoding will disagree on message boundaries, enabling request smuggling. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-444",
              "description": "CWE-444: Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T17:54:44.492Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9"
        }
      ],
      "source": {
        "advisory": "GHSA-xxqh-mfjm-7mv9",
        "discovery": "UNKNOWN"
      },
      "title": "Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-42581",
    "datePublished": "2026-05-13T17:54:44.492Z",
    "dateReserved": "2026-04-28T17:26:12.085Z",
    "dateUpdated": "2026-05-13T18:42:59.711Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42584 (GCVE-0-2026-42584)

Vulnerability from cvelistv5 – Published: 2026-05-13 18:10 – Updated: 2026-05-13 18:35

Title

Netty: HttpClientCodec response desynchronization

Summary

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpClientCodec pairs each inbound response with an outbound request by queue.poll() once per response, including for 1xx. If the client pipelines GET then HEAD and the server sends 103, then 200 with GET body, then 200 for HEAD, the queue pairs HEAD with the first 200. The HEAD rule then skips reading that message’s body, so the GET entity bytes stay on the stream and the following 200 is parsed from the wrong offset. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.

Severity

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/netty/netty/security/advisorie…	x_refsource_CONFIRM

Impacted products

2 products

Vendor	Product	Version
netty	netty	Affected: >= 4.2.0.Alpha1, < 4.2.13.Final Affected: < 4.1.133.Final
io.netty	netty-codec-http	Affected: >= 4.2.0.Alpha1, < 4.2.13.Final Affected: < 4.1.133.Final

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42584",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T18:35:01.642953Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-13T18:35:05.734Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "netty",
          "vendor": "netty",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.2.0.Alpha1, \u003c 4.2.13.Final"
            },
            {
              "status": "affected",
              "version": "\u003c 4.1.133.Final"
            }
          ]
        },
        {
          "product": "netty-codec-http",
          "vendor": "io.netty",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.2.0.Alpha1, \u003c 4.2.13.Final"
            },
            {
              "status": "affected",
              "version": "\u003c 4.1.133.Final"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpClientCodec pairs each inbound response with an outbound request by queue.poll() once per response, including for 1xx. If the client pipelines GET then HEAD and the server sends 103, then 200 with GET body, then 200 for HEAD, the queue pairs HEAD with the first 200. The HEAD rule then skips reading that message\u2019s body, so the GET entity bytes stay on the stream and the following 200 is parsed from the wrong offset. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-444",
              "description": "CWE-444: Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:10:48.437Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3"
        }
      ],
      "source": {
        "advisory": "GHSA-57rv-r2g8-2cj3",
        "discovery": "UNKNOWN"
      },
      "title": "Netty: HttpClientCodec response desynchronization"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-42584",
    "datePublished": "2026-05-13T18:10:48.437Z",
    "dateReserved": "2026-04-28T17:26:12.086Z",
    "dateUpdated": "2026-05-13T18:35:05.734Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42587 (GCVE-0-2026-42587)

Vulnerability from cvelistv5 – Published: 2026-05-13 18:22 – Updated: 2026-05-13 18:44

Title

Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

Summary

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpContentDecompressor accepts a maxAllocation parameter to limit decompression buffer size and prevent decompression bomb attacks. This limit is correctly enforced for gzip and deflate encodings via ZlibDecoder, but is silently ignored when the content encoding is br (Brotli), zstd, or snappy. An attacker can bypass the configured decompression limit by sending a compressed payload with Content-Encoding: br instead of Content-Encoding: gzip, causing unbounded memory allocation and out-of-memory denial of service. The same vulnerability exists in DelegatingDecompressorFrameListener for HTTP/2 connections. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/netty/netty/security/advisorie…	x_refsource_CONFIRM

Impacted products

3 products

Vendor	Product	Version
netty	netty	Affected: >= 4.2.0.Alpha1, < 4.2.13.Final Affected: < 4.1.133.Final
io.netty	netty-codec-http	Affected: >= 4.2.0.Alpha1, < 4.2.13.Final Affected: < 4.1.133.Final
io.netty	netty-codec-http2	Affected: >= 4.2.0.Alpha1, < 4.2.13.Final Affected: < 4.1.133.Final

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42587",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T18:43:31.138358Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-13T18:44:09.298Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "netty",
          "vendor": "netty",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.2.0.Alpha1, \u003c 4.2.13.Final"
            },
            {
              "status": "affected",
              "version": "\u003c 4.1.133.Final"
            }
          ]
        },
        {
          "product": "netty-codec-http",
          "vendor": "io.netty",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.2.0.Alpha1, \u003c 4.2.13.Final"
            },
            {
              "status": "affected",
              "version": "\u003c 4.1.133.Final"
            }
          ]
        },
        {
          "product": "netty-codec-http2",
          "vendor": "io.netty",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.2.0.Alpha1, \u003c 4.2.13.Final"
            },
            {
              "status": "affected",
              "version": "\u003c 4.1.133.Final"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpContentDecompressor accepts a maxAllocation parameter to limit decompression buffer size and prevent decompression bomb attacks. This limit is correctly enforced for gzip and deflate encodings via ZlibDecoder, but is silently ignored when the content encoding is br (Brotli), zstd, or snappy. An attacker can bypass the configured decompression limit by sending a compressed payload with Content-Encoding: br instead of Content-Encoding: gzip, causing unbounded memory allocation and out-of-memory denial of service. The same vulnerability exists in DelegatingDecompressorFrameListener for HTTP/2 connections. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:22:21.699Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv"
        }
      ],
      "source": {
        "advisory": "GHSA-f6hv-jmp6-3vwv",
        "discovery": "UNKNOWN"
      },
      "title": "Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-42587",
    "datePublished": "2026-05-13T18:22:21.699Z",
    "dateReserved": "2026-04-28T17:26:12.086Z",
    "dateUpdated": "2026-05-13T18:44:09.298Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-43512 (GCVE-0-2026-43512)

Vulnerability from cvelistv5 – Published: 2026-05-12 15:24 – Updated: 2026-05-14 19:53

Title

Apache Tomcat: Digest authenticator will authenticate any unknown user

Summary

DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from before 7.0.0. Older unsupported versions any also be affect Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-592 - DEPRECATED: Authentication Bypass Issues

Assigner

apache

References

2 references

URL	Tags
https://lists.apache.org/thread/7x09x7o12solvclsl…	vendor-advisory
http://www.openwall.com/lists/oss-security/2026/05/12/8

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache Tomcat	Affected: 11.0.0-M1 , ≤ 11.0.21 (semver) Affected: 10.1.0-M1 , ≤ 10.1.54 (semver) Affected: 9.0.0.M1 , ≤ 9.0.117 (semver) Affected: 8.5.0 , ≤ 8.5.100 (semver) Affected: 7.0.0 , ≤ 7.0.109 (semver) Unknown: 0 , < 7.0.0 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-12T17:40:59.559Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/12/8"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-43512",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T16:38:42.418842Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-14T19:53:34.555Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Tomcat",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "11.0.21",
              "status": "affected",
              "version": "11.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.1.54",
              "status": "affected",
              "version": "10.1.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.0.117",
              "status": "affected",
              "version": "9.0.0.M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.100",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.109",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "7.0.0",
              "status": "unknown",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eDEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat.\u003c/p\u003e\u003cp\u003eThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from before 7.0.0.\u003cbr\u003eOlder unsupported versions any also be affect\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue.\u003c/p\u003e"
            }
          ],
          "value": "DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from before 7.0.0.\nOlder unsupported versions any also be affect\n\nUsers are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-592",
              "description": "CWE-592 DEPRECATED: Authentication Bypass Issues",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-12T15:24:02.424Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/7x09x7o12solvclslw3sz0288xc8wx73"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Apache Tomcat: Digest authenticator will authenticate any unknown user",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-43512",
    "datePublished": "2026-05-12T15:24:02.424Z",
    "dateReserved": "2026-05-01T16:19:22.016Z",
    "dateUpdated": "2026-05-14T19:53:34.555Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-6321 (GCVE-0-2026-6321)

Vulnerability from cvelistv5 – Published: 2026-05-04 19:31 – Updated: 2026-05-05 12:44

Title

fast-uri vulnerable to path traversal via percent-encoded dot segments

Summary

fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory references, so distinct URIs could collapse onto the same normalized path. Applications that normalize or compare attacker-controlled URLs to enforce path-based policy can be bypassed, with a path that appears confined under an allowed prefix normalizing to a different location. Versions <= 3.1.0 are affected. Update to 3.1.1 or later.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

openjs

References

2 references

URL	Tags
https://github.com/fastify/fast-uri/security/advi…
https://cna.openjsf.org/security-advisories.html

Impacted products

1 product

Vendor	Product	Version
fast-uri	fast-uri	Affected: 0 , < 3.1.1 (semver) Unaffected: 3.1.1 (semver)

Credits

Jvr Matteo Collina Ulises Gascón KaKa

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6321",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-05T12:44:27.336265Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-05T12:44:34.743Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/fast-uri",
          "product": "fast-uri",
          "vendor": "fast-uri",
          "versions": [
            {
              "lessThan": "3.1.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "3.1.1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Jvr"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Matteo Collina"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Ulises Gasc\u00f3n"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "KaKa"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory references, so distinct URIs could collapse onto the same normalized path. Applications that normalize or compare attacker-controlled URLs to enforce path-based policy can be bypassed, with a path that appears confined under an allowed prefix normalizing to a different location. Versions \u003c= 3.1.0 are affected. Update to 3.1.1 or later."
            }
          ],
          "value": "fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory references, so distinct URIs could collapse onto the same normalized path. Applications that normalize or compare attacker-controlled URLs to enforce path-based policy can be bypassed, with a path that appears confined under an allowed prefix normalizing to a different location. Versions \u003c= 3.1.0 are affected. Update to 3.1.1 or later."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-04T19:31:57.253Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "fast-uri vulnerable to path traversal via percent-encoded dot segments",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-6321",
    "datePublished": "2026-05-04T19:31:57.253Z",
    "dateReserved": "2026-04-14T20:23:01.545Z",
    "dateUpdated": "2026-05-05T12:44:34.743Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:25123

CVE-2026-42578 (GCVE-0-2026-42578)

CVE-2026-42579 (GCVE-0-2026-42579)

CVE-2026-42581 (GCVE-0-2026-42581)

CVE-2026-42584 (GCVE-0-2026-42584)

CVE-2026-42587 (GCVE-0-2026-42587)

CVE-2026-43512 (GCVE-0-2026-43512)

CVE-2026-6321 (GCVE-0-2026-6321)

Tags

Sightings

Nomenclature