{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated OpenShift Compliance Operator image that fixes various bugs and adds new\nenhancements is now available for the Red Hat OpenShift Enterprise 4 catalog.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The OpenShift Compliance Operator v1.9.1 is now available.\nSee the documentation for bug fix information:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/security_and_compliance/compliance-operator#compliance-operator-release-notes",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:26571",
        "url": "https://access.redhat.com/errata/RHSA-2026:26571"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32280"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32283"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33810"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26571.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Compliance Operator bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-06-19T18:23:37+00:00",
      "generator": {
        "date": "2026-06-19T18:23:37+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.0.0"
        }
      },
      "id": "RHSA-2026:26571",
      "initial_release_date": "2026-06-17T13:17:24+00:00",
      "revision_history": [
        {
          "date": "2026-06-17T13:17:24+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-17T13:17:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-19T18:23:37+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "OpenShift Compliance Operator 1",
                "product": {
                  "name": "OpenShift Compliance Operator 1",
                  "product_id": "OpenShift Compliance Operator 1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_compliance_operator:1::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "OpenShift Compliance Operator"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-operator-bundle@sha256%3Add5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be?arch=amd64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-operator-bundle\u0026tag=1781605005"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-content-rhel8@sha256%3A637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850?arch=amd64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-content-rhel8\u0026tag=1781599527"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-must-gather-rhel8@sha256%3Ab4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8?arch=amd64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8\u0026tag=1781205733"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-openscap-rhel8@sha256%3Ad2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71?arch=amd64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-openscap-rhel8\u0026tag=1781600013"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-rhel8-operator@sha256%3Ae049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095?arch=amd64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-rhel8-operator\u0026tag=1781599863"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-content-rhel8@sha256%3A55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848?arch=arm64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-content-rhel8\u0026tag=1781599527"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-must-gather-rhel8@sha256%3Acfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada?arch=arm64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8\u0026tag=1781205733"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-openscap-rhel8@sha256%3A138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9?arch=arm64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-openscap-rhel8\u0026tag=1781600013"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-rhel8-operator@sha256%3A7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47?arch=arm64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-rhel8-operator\u0026tag=1781599863"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-content-rhel8@sha256%3A2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c?arch=ppc64le\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-content-rhel8\u0026tag=1781599527"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-must-gather-rhel8@sha256%3A754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4?arch=ppc64le\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8\u0026tag=1781205733"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-openscap-rhel8@sha256%3Acc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa?arch=ppc64le\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-openscap-rhel8\u0026tag=1781600013"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-rhel8-operator@sha256%3Aff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88?arch=ppc64le\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-rhel8-operator\u0026tag=1781599863"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-content-rhel8@sha256%3Ae111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3?arch=s390x\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-content-rhel8\u0026tag=1781599527"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-must-gather-rhel8@sha256%3A372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded?arch=s390x\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8\u0026tag=1781205733"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-openscap-rhel8@sha256%3Afc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a?arch=s390x\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-openscap-rhel8\u0026tag=1781600013"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-rhel8-operator@sha256%3A4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef?arch=s390x\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-rhel8-operator\u0026tag=1781599863"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-32280",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-08T02:01:19.572351+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456339"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64"
        ],
        "known_not_affected": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456339",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/758320",
          "url": "https://go.dev/cl/758320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78282",
          "url": "https://go.dev/issue/78282"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4947",
          "url": "https://pkg.go.dev/vuln/GO-2026-4947"
        }
      ],
      "release_date": "2026-04-08T01:06:58.595000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-17T13:17:24+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your\nsystem have been applied. For details on how to apply this update, refer to:\n  \nhttps://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:26571"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
    },
    {
      "cve": "CVE-2026-32281",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-04-08T02:01:00.930989+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456333"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64"
        ],
        "known_not_affected": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456333",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/758061",
          "url": "https://go.dev/cl/758061"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78281",
          "url": "https://go.dev/issue/78281"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4946",
          "url": "https://pkg.go.dev/vuln/GO-2026-4946"
        }
      ],
      "release_date": "2026-04-08T01:06:58.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-17T13:17:24+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your\nsystem have been applied. For details on how to apply this update, refer to:\n  \nhttps://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:26571"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
    },
    {
      "cve": "CVE-2026-32282",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-04-08T02:01:12.683211+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64"
        ],
        "known_not_affected": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763761",
          "url": "https://go.dev/cl/763761"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78293",
          "url": "https://go.dev/issue/78293"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4864",
          "url": "https://pkg.go.dev/vuln/GO-2026-4864"
        }
      ],
      "release_date": "2026-04-08T01:06:55.953000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-17T13:17:24+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your\nsystem have been applied. For details on how to apply this update, refer to:\n  \nhttps://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:26571"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
    },
    {
      "cve": "CVE-2026-32283",
      "cwe": {
        "id": "CWE-764",
        "name": "Multiple Locks of a Critical Resource"
      },
      "discovery_date": "2026-04-08T02:01:16.213799+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456338"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64"
        ],
        "known_not_affected": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456338",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763767",
          "url": "https://go.dev/cl/763767"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78334",
          "url": "https://go.dev/issue/78334"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4870",
          "url": "https://pkg.go.dev/vuln/GO-2026-4870"
        }
      ],
      "release_date": "2026-04-08T01:06:57.670000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-17T13:17:24+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your\nsystem have been applied. For details on how to apply this update, refer to:\n  \nhttps://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:26571"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
    },
    {
      "cve": "CVE-2026-33810",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-04-08T02:01:09.100830+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456335"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64"
        ],
        "known_not_affected": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456335",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763763",
          "url": "https://go.dev/cl/763763"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78332",
          "url": "https://go.dev/issue/78332"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4866",
          "url": "https://pkg.go.dev/vuln/GO-2026-4866"
        }
      ],
      "release_date": "2026-04-08T01:06:56.546000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-17T13:17:24+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your\nsystem have been applied. For details on how to apply this update, refer to:\n  \nhttps://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:26571"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
    }
  ]
}