Vulnerability-Lookup

RHSA-2026:29854

Vulnerability from csaf_redhat - Published: 2026-06-25 08:18 - Updated: 2026-06-25 11:17

Summary

Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

Severity

Important

Notes

Topic: A new version of OpenShift API for Data Protection (OADP) is now available.

Details: OpenShift API for Data Protection (OADP) enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and snapshot-based backups for persistent volumes.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-68121

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x	—	Vendor Fix fix

Known not affected 37 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x		—

Threats

Impact Moderate

CVE-2026-25679

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1286 - Improper Validation of Syntactic Correctness of Input

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x	—	Vendor Fix fix Workaround

Known not affected 37 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x	—	Workaround

Threats

Impact Important

CVE-2026-27137

A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-295 - Improper Certificate Validation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x	—	Vendor Fix fix Workaround

Known not affected 37 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x	—	Workaround

Threats

Impact Important

CVE-2026-32280

A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x	—	Vendor Fix fix

Known not affected 37 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x		—

Threats

Impact Important

CVE-2026-32281

A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 40 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x	—	Vendor Fix fix Workaround

Known not affected 1 product

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64		—	Workaround

Threats

Impact Moderate

CVE-2026-32282

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Affected products

Fixed 40 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x	—	Vendor Fix fix Workaround

Known not affected 1 product

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64		—	Workaround

Threats

Impact Moderate

CVE-2026-33186

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-551 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

Affected products

Fixed 40 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x	—	Vendor Fix fix Workaround

Known not affected 1 product

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64		—	Workaround

Threats

Impact Important

CVE-2026-33747

A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le	—	Vendor Fix fix Workaround

Known not affected 37 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x	—	Workaround

Threats

Impact Moderate

CVE-2026-33748

A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le	—	Vendor Fix fix Workaround

Known not affected 37 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x	—	Workaround

Threats

Impact Moderate

CVE-2026-33810

A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x	—	Vendor Fix fix

Known not affected 37 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x		—

Threats

Impact Important

CVE-2026-34986

A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x	—	Vendor Fix fix Workaround

Known not affected 33 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x	—	Workaround

Threats

Impact Important

References

90 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:29854	self
https://access.redhat.com/security/cve/CVE-2025-68121	external
https://access.redhat.com/security/cve/CVE-2026-25679	external
https://access.redhat.com/security/cve/CVE-2026-27137	external
https://access.redhat.com/security/cve/CVE-2026-32280	external
https://access.redhat.com/security/cve/CVE-2026-32281	external
https://access.redhat.com/security/cve/CVE-2026-32282	external
https://access.redhat.com/security/cve/CVE-2026-33186	external
https://access.redhat.com/security/cve/CVE-2026-33747	external
https://access.redhat.com/security/cve/CVE-2026-33748	external
https://access.redhat.com/security/cve/CVE-2026-33810	external
https://access.redhat.com/security/cve/CVE-2026-34986	external
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/openshif…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-68121	self
https://bugzilla.redhat.com/show_bug.cgi?id=2437111	external
https://www.cve.org/CVERecord?id=CVE-2025-68121	external
https://nvd.nist.gov/vuln/detail/CVE-2025-68121	external
https://go.dev/cl/737700	external
https://go.dev/issue/77217	external
https://groups.google.com/g/golang-announce/c/K09…	external
https://pkg.go.dev/vuln/GO-2026-4337	external
https://access.redhat.com/security/cve/CVE-2026-25679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2445356	external
https://www.cve.org/CVERecord?id=CVE-2026-25679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25679	external
https://go.dev/cl/752180	external
https://go.dev/issue/77578	external
https://groups.google.com/g/golang-announce/c/Edh…	external
https://pkg.go.dev/vuln/GO-2026-4601	external
https://access.redhat.com/security/cve/CVE-2026-27137	self
https://bugzilla.redhat.com/show_bug.cgi?id=2445345	external
https://www.cve.org/CVERecord?id=CVE-2026-27137	external
https://nvd.nist.gov/vuln/detail/CVE-2026-27137	external
https://go.dev/cl/752182	external
https://go.dev/issue/77952	external
https://pkg.go.dev/vuln/GO-2026-4599	external
https://access.redhat.com/security/cve/CVE-2026-32280	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456339	external
https://www.cve.org/CVERecord?id=CVE-2026-32280	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32280	external
https://go.dev/cl/758320	external
https://go.dev/issue/78282	external
https://groups.google.com/g/golang-announce/c/0uY…	external
https://pkg.go.dev/vuln/GO-2026-4947	external
https://access.redhat.com/security/cve/CVE-2026-32281	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456333	external
https://www.cve.org/CVERecord?id=CVE-2026-32281	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32281	external
https://go.dev/cl/758061	external
https://go.dev/issue/78281	external
https://pkg.go.dev/vuln/GO-2026-4946	external
https://access.redhat.com/security/cve/CVE-2026-32282	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456336	external
https://www.cve.org/CVERecord?id=CVE-2026-32282	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32282	external
https://go.dev/cl/763761	external
https://go.dev/issue/78293	external
https://pkg.go.dev/vuln/GO-2026-4864	external
https://access.redhat.com/security/cve/CVE-2026-33186	self
https://bugzilla.redhat.com/show_bug.cgi?id=2449833	external
https://www.cve.org/CVERecord?id=CVE-2026-33186	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33186	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-33747	self
https://bugzilla.redhat.com/show_bug.cgi?id=2452076	external
https://www.cve.org/CVERecord?id=CVE-2026-33747	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33747	external
https://github.com/moby/buildkit/releases/tag/v0.28.1	external
https://github.com/moby/buildkit/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-33748	self
https://bugzilla.redhat.com/show_bug.cgi?id=2452271	external
https://www.cve.org/CVERecord?id=CVE-2026-33748	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33748	external
https://docs.docker.com/build/concepts/context/#u…	external
https://github.com/moby/buildkit/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-33810	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456335	external
https://www.cve.org/CVERecord?id=CVE-2026-33810	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33810	external
https://go.dev/cl/763763	external
https://go.dev/issue/78332	external
https://pkg.go.dev/vuln/GO-2026-4866	external
https://access.redhat.com/security/cve/CVE-2026-34986	self
https://bugzilla.redhat.com/show_bug.cgi?id=2455470	external
https://www.cve.org/CVERecord?id=CVE-2026-34986	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34986	external
https://github.com/go-jose/go-jose/security/advis…	external
https://pkg.go.dev/github.com/go-jose/go-jose/v4#…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A new version of OpenShift API for Data Protection (OADP) is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenShift API for Data Protection (OADP) enables you to back up and restore\napplication resources, persistent volume data, and internal container\nimages to external backup storage. OADP enables both file system-based and\nsnapshot-based backups for persistent volumes.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:29854",
        "url": "https://access.redhat.com/errata/RHSA-2026:29854"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
        "url": "https://access.redhat.com/security/cve/CVE-2025-68121"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27137"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32280"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33747"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33748"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33810"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34986"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore",
        "url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29854.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift API for Data Protection",
    "tracking": {
      "current_release_date": "2026-06-25T11:17:15+00:00",
      "generator": {
        "date": "2026-06-25T11:17:15+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.1.0"
        }
      },
      "id": "RHSA-2026:29854",
      "initial_release_date": "2026-06-25T08:18:45+00:00",
      "revision_history": [
        {
          "date": "2026-06-25T08:18:45+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-25T08:18:54+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-25T11:17:15+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "OpenShift API for Data Protection 1.4",
                "product": {
                  "name": "OpenShift API for Data Protection 1.4",
                  "product_id": "OpenShift API for Data Protection 1.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "OpenShift API for Data Protection"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Aad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1779243307"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1779770049"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-rhel9-operator@sha256%3A143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1779847451"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-operator-bundle@sha256%3Afbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1779848257"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-rhel9@sha256%3A6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1779809598"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1779243793"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Aca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1779243113"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Ae213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1779243915"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1779243074"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Ad5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1779243128"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1779809597"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1779243307"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ab8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1779770049"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ab6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1779847451"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-rhel9@sha256%3Abcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1779809598"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3Aaabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1779243793"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Aeacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1779243113"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1779243915"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Af83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1779243074"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Af12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1779243128"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1779809597"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1779243307"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ab3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1779770049"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-rhel9-operator@sha256%3Acf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1779847451"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-rhel9@sha256%3Ad437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1779809598"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3Acaff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1779243793"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Afb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1779243113"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Adb5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1779243915"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Aa080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1779243074"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Afc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1779243128"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3Ae30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1779809597"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Afa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1779243307"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ad766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1779770049"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-rhel9-operator@sha256%3A92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1779847451"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-rhel9@sha256%3Ac720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1779809598"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1779243793"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1779243113"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1779243915"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1779243074"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Aed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1779243128"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1779809597"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x as a component of OpenShift API for Data Protection 1.4",
          "product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-68121",
      "discovery_date": "2026-02-05T18:01:30.086058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2437111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "RHBZ#2437111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/737700",
          "url": "https://go.dev/cl/737700"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77217",
          "url": "https://go.dev/issue/77217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
          "url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4337",
          "url": "https://pkg.go.dev/vuln/GO-2026-4337"
        }
      ],
      "release_date": "2026-02-05T17:48:44.141000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T08:18:45+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29854"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
    },
    {
      "cve": "CVE-2026-25679",
      "cwe": {
        "id": "CWE-1286",
        "name": "Improper Validation of Syntactic Correctness of Input"
      },
      "discovery_date": "2026-03-06T22:02:11.567841+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445356"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445356",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/752180",
          "url": "https://go.dev/cl/752180"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77578",
          "url": "https://go.dev/issue/77578"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4601",
          "url": "https://pkg.go.dev/vuln/GO-2026-4601"
        }
      ],
      "release_date": "2026-03-06T21:28:14.211000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T08:18:45+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29854"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
    },
    {
      "cve": "CVE-2026-27137",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-03-06T22:01:38.859733+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445345"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445345",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/752182",
          "url": "https://go.dev/cl/752182"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77952",
          "url": "https://go.dev/issue/77952"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4599",
          "url": "https://pkg.go.dev/vuln/GO-2026-4599"
        }
      ],
      "release_date": "2026-03-06T21:28:13.748000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T08:18:45+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29854"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
    },
    {
      "cve": "CVE-2026-32280",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-08T02:01:19.572351+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456339"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456339",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/758320",
          "url": "https://go.dev/cl/758320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78282",
          "url": "https://go.dev/issue/78282"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4947",
          "url": "https://pkg.go.dev/vuln/GO-2026-4947"
        }
      ],
      "release_date": "2026-04-08T01:06:58.595000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T08:18:45+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29854"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
    },
    {
      "cve": "CVE-2026-32281",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-04-08T02:01:00.930989+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456333"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456333",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/758061",
          "url": "https://go.dev/cl/758061"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78281",
          "url": "https://go.dev/issue/78281"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4946",
          "url": "https://pkg.go.dev/vuln/GO-2026-4946"
        }
      ],
      "release_date": "2026-04-08T01:06:58.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T08:18:45+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29854"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
    },
    {
      "cve": "CVE-2026-32282",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-04-08T02:01:12.683211+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763761",
          "url": "https://go.dev/cl/763761"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78293",
          "url": "https://go.dev/issue/78293"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4864",
          "url": "https://pkg.go.dev/vuln/GO-2026-4864"
        }
      ],
      "release_date": "2026-04-08T01:06:55.953000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T08:18:45+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29854"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
    },
    {
      "cve": "CVE-2026-33186",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-03-20T23:02:27.802640+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2449833"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "RHBZ#2449833",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
        }
      ],
      "release_date": "2026-03-20T22:23:32.147000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T08:18:45+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29854"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
    },
    {
      "cve": "CVE-2026-33747",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-03-27T02:01:29.921765+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2452076"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33747"
        },
        {
          "category": "external",
          "summary": "RHBZ#2452076",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
          "url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
          "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
        }
      ],
      "release_date": "2026-03-27T00:49:06.165000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T08:18:45+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29854"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
    },
    {
      "cve": "CVE-2026-33748",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-03-27T15:02:00.107493+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2452271"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33748"
        },
        {
          "category": "external",
          "summary": "RHBZ#2452271",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
        },
        {
          "category": "external",
          "summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
          "url": "https://docs.docker.com/build/concepts/context/#url-fragments"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
          "url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
          "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
        }
      ],
      "release_date": "2026-03-27T14:00:21.200000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T08:18:45+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29854"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
    },
    {
      "cve": "CVE-2026-33810",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-04-08T02:01:09.100830+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456335"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456335",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763763",
          "url": "https://go.dev/cl/763763"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78332",
          "url": "https://go.dev/issue/78332"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4866",
          "url": "https://pkg.go.dev/vuln/GO-2026-4866"
        }
      ],
      "release_date": "2026-04-08T01:06:56.546000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T08:18:45+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29854"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
    },
    {
      "cve": "CVE-2026-34986",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-04-06T17:01:34.639203+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455470"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
          "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455470",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
          "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
          "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
        }
      ],
      "release_date": "2026-04-06T16:22:45.353000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T08:18:45+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:29854"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
            "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
    }
  ]
}

CVE-2026-34986 (GCVE-0-2026-34986)

Vulnerability from cvelistv5 – Published: 2026-04-06 16:22 – Updated: 2026-04-07 14:21

Title

Go JOSE affect by a panic in JWE decryption

Summary

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-248 - Uncaught Exception

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/go-jose/go-jose/security/advis…	x_refsource_CONFIRM
https://pkg.go.dev/github.com/go-jose/go-jose/v4#…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
go-jose	go-jose	Affected: >= 4.0.0, < 4.1.4 Affected: < 3.0.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-34986",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-07T14:21:42.477191Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-07T14:21:54.041Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "go-jose",
          "vendor": "go-jose",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 4.1.4"
            },
            {
              "status": "affected",
              "version": "\u003c 3.0.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-06T16:22:45.353Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
        },
        {
          "name": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
        }
      ],
      "source": {
        "advisory": "GHSA-78h2-9frx-2jm8",
        "discovery": "UNKNOWN"
      },
      "title": "Go JOSE affect by a panic in JWE decryption"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-34986",
    "datePublished": "2026-04-06T16:22:45.353Z",
    "dateReserved": "2026-03-31T19:38:31.617Z",
    "dateUpdated": "2026-04-07T14:21:54.041Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:29854

CVE-2026-34986 (GCVE-0-2026-34986)

Tags

Sightings

Nomenclature