{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.18.0 is now available with bug fixes and feature enhancements.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.18.0",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:48085",
        "url": "https://access.redhat.com/errata/RHSA-2026:48085"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27459",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27459"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27962",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27962"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
        "url": "https://access.redhat.com/security/cve/CVE-2026-29074"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32590",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32590"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32591"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34986"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42039",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42039"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4427",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4427"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48526",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48526"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48085.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Quay 3.18.0",
    "tracking": {
      "current_release_date": "2026-07-30T08:03:23+00:00",
      "generator": {
        "date": "2026-07-30T08:03:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.8"
        }
      },
      "id": "RHSA-2026:48085",
      "initial_release_date": "2026-07-29T17:45:57+00:00",
      "revision_history": [
        {
          "date": "2026-07-29T17:45:57+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-29T17:46:01+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-30T08:03:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Quay 3.18",
                "product": {
                  "name": "Red Hat Quay 3.18",
                  "product_id": "Red Hat Quay 3.18",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3.18::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1784987883"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3Ae07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1784986956"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1785239883"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1784987002"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1784987354"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3Ada29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1784986989"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3A8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1784986949"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256%3A030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1785155359"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel9@sha256%3Af71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1784986977"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3A6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1784987273"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1784986956"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1784987002"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1784987354"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3A71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1784986989"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3Abde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0?arch=arm64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1784986949"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel9@sha256%3Abc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1784986977"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3A9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1784987273"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3Af2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1784986956"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3Af720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1784987002"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1784987354"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3Aef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1784986989"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3Ac5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1784986949"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel9@sha256%3A4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1784986977"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3A4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1784987273"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1784986956"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1784987002"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1784987354"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel9@sha256%3Afd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1784986989"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
                  "product_id": "registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel9@sha256%3Aa3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1784986949"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel9@sha256%3A7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1784986977"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
                  "product_id": "registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel9@sha256%3A14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1784987273"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64 as a component of Red Hat Quay 3.18",
          "product_id": "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.18"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-4427",
      "discovery_date": "2026-03-18T14:02:19.414820+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "This CVE has been marked as Rejected by the assigning CNA.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4427"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4427",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4427"
        }
      ],
      "release_date": "2026-03-18T13:00:31+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-29T17:45:57+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48085"
        }
      ],
      "title": "github.com/jackc/pgproto3: pgproto3: Denial of Service via negative field length in DataRow message"
    },
    {
      "cve": "CVE-2026-27459",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-03-18T00:01:41.404915+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448503"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pyOpenSSL. The set_cookie_generate_callback callback function can be used to generate DTLS cookies. When the callback returns a cookie string or byte sequence longer than 256 bytes, a buffer overflow can be triggered due to a missing bounds checking before copying the data to a fixed-size buffer provided by the underlying OpenSSL library.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyOpenSSL: DTLS cookie callback buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is only exploitable when an application using the pyOpenSSL library provides a custom callback to the set_cookie_generate_callback function. For the buffer overflow to occur, the callback function must return a cookie string or byte sequence longer than 256 bytes, limiting the exposure of this issue. Due to these reasons, this vulnerability has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27459"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448503",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448503"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27459",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27459"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27459",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27459"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst",
          "url": "https://github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/pyopenssl/commit/57f09bb4bb051d3bc2a1abd36e9525313d5cd408",
          "url": "https://github.com/pyca/pyopenssl/commit/57f09bb4bb051d3bc2a1abd36e9525313d5cd408"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/pyopenssl/security/advisories/GHSA-5pwr-322w-8jr4",
          "url": "https://github.com/pyca/pyopenssl/security/advisories/GHSA-5pwr-322w-8jr4"
        }
      ],
      "release_date": "2026-03-17T23:34:28.483000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-29T17:45:57+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48085"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, ensure the callback provided to the set_cookie_generate_callback function strictly limits the returned cookie string or byte sequence to under 256 bytes.",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyOpenSSL: DTLS cookie callback buffer overflow"
    },
    {
      "cve": "CVE-2026-27962",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-03-16T18:02:07.041902+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448164"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Authlib, a Python library used for creating secure authentication and authorization systems. This vulnerability, known as JWK (JSON Web Key) Header Injection, affects how Authlib verifies digital signatures in JWS (JSON Web Signature) tokens. An attacker can exploit this by creating a specially crafted token that includes their own cryptographic key in the header. When the system attempts to verify this token without a predefined key, it mistakenly uses the attacker\u0027s key, allowing them to bypass authentication and gain unauthorized access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "authlib: Authlib: Authentication bypass due to JWK Header Injection vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This critical vulnerability in Authlib\u0027s JWS implementation allows unauthenticated attackers to forge JWTs by embedding their own cryptographic key in the token header. Impact is high to confidentiality and integrity as attackers can bypass authentication.\n\nThe impact for Red Hat Quay is rated as low because it imports authlib solely as a JWK parsing utility and performs all JWT signature verification through PyJWT, so the vulnerable jws.deserialize_compact() code path is never called.\n\nRed Hat OpenShift AI is not affected, since authlib is only present as a transitive dependency in the dev dependency group and is not included in production image builds, so the vulnerable code is not present in the shipped product.\n\nRed Hat Satellite is not affected, as authlib is only present as a dependency of fastmcp. In Satellite, fastmcp only invokes authlib using jwt.decode() which isn\u0027t able to reach the vulnerability condition even with key=none.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27962"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448164",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448164"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27962",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27962"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27962",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27962"
        },
        {
          "category": "external",
          "summary": "https://github.com/authlib/authlib/commit/a5d4b2d4c9e46bfa11c82f85fdc2bcc0b50ae681",
          "url": "https://github.com/authlib/authlib/commit/a5d4b2d4c9e46bfa11c82f85fdc2bcc0b50ae681"
        },
        {
          "category": "external",
          "summary": "https://github.com/authlib/authlib/releases/tag/v1.6.9",
          "url": "https://github.com/authlib/authlib/releases/tag/v1.6.9"
        },
        {
          "category": "external",
          "summary": "https://github.com/authlib/authlib/security/advisories/GHSA-wvwj-cvrp-7pv5",
          "url": "https://github.com/authlib/authlib/security/advisories/GHSA-wvwj-cvrp-7pv5"
        }
      ],
      "release_date": "2026-03-16T17:34:38.946000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-29T17:45:57+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48085"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "authlib: Authlib: Authentication bypass due to JWK Header Injection vulnerability"
    },
    {
      "cve": "CVE-2026-29074",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-03-06T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445132"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "svgo: SVGO: Denial of Service via XML entity expansion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-29074"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445132",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
        },
        {
          "category": "external",
          "summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
          "url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
        }
      ],
      "release_date": "2026-03-06T07:23:05.716000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-29T17:45:57+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48085"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "svgo: SVGO: Denial of Service via XML entity expansion"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Antony Di Scala",
            "Michael Whale"
          ]
        }
      ],
      "cve": "CVE-2026-32590",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2026-03-12T14:43:11.443000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2446964"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Red Hat Quay\u0027s handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mirror-registry: remote code execution using pickle deserialization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Exploitation requires valid login credentials. The attacker must be authenticated to the registry, either through the web interface or through a container tool such as Podman.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32590"
        },
        {
          "category": "external",
          "summary": "RHBZ#2446964",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446964"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32590",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32590"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32590",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32590"
        }
      ],
      "release_date": "2026-04-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-29T17:45:57+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48085"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mirror-registry: remote code execution using pickle deserialization"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Antony Di Scala",
            "Michael Whale"
          ]
        }
      ],
      "cve": "CVE-2026-32591",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-03-12T15:09:38.210000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2446965"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32591"
        },
        {
          "category": "external",
          "summary": "RHBZ#2446965",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
        }
      ],
      "release_date": "2026-04-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-29T17:45:57+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48085"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
    },
    {
      "cve": "CVE-2026-34986",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-04-06T17:01:34.639203+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455470"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455470",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
          "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
          "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
        }
      ],
      "release_date": "2026-04-06T16:22:45.353000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-29T17:45:57+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48085"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
    },
    {
      "cve": "CVE-2026-42039",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-24T19:01:44.887156+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461630"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42039"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461630",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461630"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42039",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039"
        },
        {
          "category": "external",
          "summary": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9",
          "url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
        }
      ],
      "release_date": "2026-04-24T18:01:30.775000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-29T17:45:57+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48085"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data"
    },
    {
      "cve": "CVE-2026-48526",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-05-28T16:01:22.805235+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2482734"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
          "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48526"
        },
        {
          "category": "external",
          "summary": "RHBZ#2482734",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
        }
      ],
      "release_date": "2026-05-28T15:09:09.258000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-29T17:45:57+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48085"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:8e4ba7b36bb00f85351969db32a69ad53c0a830bd28e99d52c634957d0116872_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:a3f7e751e73a721c9f5d430695db34ca46220c77e2c4a405f289b69971032768_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:bde2614ef2445a23f8261dd0547d4b8b6dc1729166feb2205013f69e02e8a0f0_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/clair-rhel9@sha256:c5e4e4beecb97e537bfc5c3625ed44700d76e76b4255c42a1a58eba17dad3ec1_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:188197a713a80ad9157543603ab4a9a2dd3b1ac02dc88e09769e02cc03f53226_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:12843e40f6259e2cadb64f523b6a90cfdbae1bc9a7d403febaf4843988e5824e_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4d11b17e949e0a60d5f1286de138b7f1972bb171339d3a1025a611e34d2e3b97_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:965399c975124f57adaa95dedad69dc5a55ba9a3f0c1149c48a9a1c4a0236d9a_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f720ee9b9001f3e5247f23bd379cd71dcecb97b1d0ba7408c18e17bd90963dbc_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:0542c1b9d7d04512224735ab114aa5eb032ef8bf1f4d56bb09dd8ec67a563056_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:162d06a526247c2f65c3468aa42734589dedefcd05bccaf49bc94a2df3da3385_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:58b01cbfc532ee3739e53223598d02441259b0552494dd3eda3acdd9daf18681_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:884f75efc59178b36ea2c03bfbe880f32a7ad9470444dffb5bbb43ccdbc46569_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:71d3d0fa46bca36980ca506eae705b120d9530134dc899b33acf0609459a95ab_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:da29edba778acb7f7fd42408d954363657b6ee33b30234c083f266efc47cb726_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:ef959a28d20634cd659dffbb788bfc08b17f22c1f865746e3114d14cffd163b7_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-builder-rhel9@sha256:fd85bcfac47614fe448ba6fd5020cc01900ce1dbdda2b7ebb37c202dc5f272a1_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:6840404e712485db83fbfba9117eae50cf64c2a944eb58130c4455e138fa36ad_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:4f72b7b5cbe21d3a45e6da097e107376e16e1e189936ccb63b01c4070e943ebe_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:62b71ff5b1a1ea65a758f7ad4d2159914370ca98e363c8cadd522dba4228c486_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e07a70ef05b6d254743e387e391e56942beb34968348277ff1e79c2a56ead6af_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f2be30c6ab2d3f5f0c7efe4fe3b078b4d4312d6f948464c6331f36825fc44a8c_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-bundle@sha256:030ee454a0e8ae48d1c934128f554ff0b83afe1ca1803cdedfc14bb28a62d019_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:4edc046a5e57b80baf5df567f04785799af859b56c187f0614ca1e97fc1490bd_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:7a80ffaa13fdbe5a30f8827b454d5b67814724a473370dc0d9d5192c3801f304_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:bc606a6e09b2f435906e583ab20dacaecee704da54195befd40f9cfa40ab0ff1_arm64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-operator-rhel9@sha256:f71061cdc7d305b4589266f1833b2d0d2108cfb86be27d0fddb19dea8835cfb0_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390x",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:4207ba218f8ae31531add66d3ef5bf726f0034dfa7abb109d2c1bb1e2ed8b95b_ppc64le",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:6446f4989c8ad3d09abbd7ccf4af8ee341044f833b2d1e8d2c410c899dc1aa80_amd64",
            "Red Hat Quay 3.18:registry.redhat.io/quay/quay-rhel9@sha256:9ee2985651443aef099fd421de5e9b7adb550aeafe2479a424864b85e0e50bc1_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
    }
  ]
}