Vulnerability-Lookup

RHSA-2026:48872

Vulnerability from csaf_redhat - Published: 2026-07-30 18:06 - Updated: 2026-08-04 21:57

Summary

Red Hat Security Advisory: RHACS 4.9.10 security and bug fix update

Severity

Important

Notes

Topic: Updated images are now available for Red Hat Advanced Cluster Security (RHACS), which typically include new features, bug fixes, and/or security patches.

Details: See the release notes (link in the references section) for a description of the fixes and enhancements in this particular release.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-13149

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64	—	Workaround

Threats

Impact Important

CVE-2026-41889

A flaw was found in pgx, a PostgreSQL driver and toolkit for Go. This SQL injection vulnerability can occur when using the non-default simple protocol, a dollar-quoted string literal in the SQL query, and when that string literal contains text interpreted as a placeholder with an attacker-controlled value. An attacker could potentially manipulate SQL queries, leading to a low impact on data integrity.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64	—	Workaround

Threats

Impact Moderate

CVE-2026-49478

A flaw was found in Fulcio's OpenID Connect (OIDC) Discovery client. This vulnerability allows a remote attacker to perform Server-Side Request Forgery (SSRF) by redirecting discovery requests to internal systems. Additionally, an attacker can manipulate the JSON Web Key Set (JWKS) Uniform Resource Identifier (URI) to poison the verifier cache with malicious keys, enabling the validation of attacker-controlled signatures. Furthermore, the flaw can lead to the leakage of Kubernetes ServiceAccount tokens to third-party hosts through cross-host redirects or misconfigured MetaIssuers, potentially exposing sensitive cluster credentials.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64	—	Workaround

Threats

Impact Moderate

CVE-2026-49978

A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a <template>.content. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le	—	Vendor Fix fix

Known not affected 41 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64		—

Threats

Impact Important

CVE-2026-50163

A flaw was found in oras-go, a Go library used for managing OCI (Open Container Initiative) artifacts. An attacker can exploit this vulnerability by providing a specially crafted tarball containing a malicious hardlink. When this tarball is extracted, the hardlink can be manipulated to point to files outside the intended extraction location, specifically within the victim's current working directory. This allows an attacker to read sensitive information from the system, and in some cases, could lead to unauthorized access to critical system files if the component is operating with elevated privileges.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64	—	Workaround

Threats

Impact Moderate

CVE-2026-53488

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.

8.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-53492

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64	—	Vendor Fix fix

Known not affected 37 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64		—
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le		—

Threats

Impact Important

CVE-2026-59869

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64	—	Workaround
Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64	—	Workaround

Threats

Impact Important

References

61 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:48872	self
https://access.redhat.com/security/cve/CVE-2026-13149	external
https://access.redhat.com/security/cve/CVE-2026-41889	external
https://access.redhat.com/security/cve/CVE-2026-49478	external
https://access.redhat.com/security/cve/CVE-2026-49978	external
https://access.redhat.com/security/cve/CVE-2026-50163	external
https://access.redhat.com/security/cve/CVE-2026-53488	external
https://access.redhat.com/security/cve/CVE-2026-53492	external
https://access.redhat.com/security/cve/CVE-2026-59869	external
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-13149	self
https://bugzilla.redhat.com/show_bug.cgi?id=2494813	external
https://www.cve.org/CVERecord?id=CVE-2026-13149	external
https://nvd.nist.gov/vuln/detail/CVE-2026-13149	external
https://github.com/juliangruber/brace-expansion/c…	external
https://www.npmjs.com/package/brace-expansion	external
https://access.redhat.com/security/cve/CVE-2026-41889	self
https://bugzilla.redhat.com/show_bug.cgi?id=2468307	external
https://www.cve.org/CVERecord?id=CVE-2026-41889	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41889	external
https://github.com/jackc/pgx/commit/60644f84918a8…	external
https://github.com/jackc/pgx/releases/tag/v5.9.2	external
https://github.com/jackc/pgx/security/advisories/…	external
https://access.redhat.com/security/cve/CVE-2026-49478	self
https://bugzilla.redhat.com/show_bug.cgi?id=2499690	external
https://www.cve.org/CVERecord?id=CVE-2026-49478	external
https://nvd.nist.gov/vuln/detail/CVE-2026-49478	external
https://github.com/sigstore/fulcio/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-49978	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500695	external
https://www.cve.org/CVERecord?id=CVE-2026-49978	external
https://nvd.nist.gov/vuln/detail/CVE-2026-49978	external
https://github.com/cure53/DOMPurify/commit/ca30f0…	external
https://github.com/cure53/DOMPurify/releases/tag/3.4.7	external
https://github.com/cure53/DOMPurify/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-50163	self
https://bugzilla.redhat.com/show_bug.cgi?id=2499695	external
https://www.cve.org/CVERecord?id=CVE-2026-50163	external
https://nvd.nist.gov/vuln/detail/CVE-2026-50163	external
https://github.com/oras-project/oras-go/security/…	external
https://access.redhat.com/security/cve/CVE-2026-53488	self
https://bugzilla.redhat.com/show_bug.cgi?id=2495815	external
https://www.cve.org/CVERecord?id=CVE-2026-53488	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53488	external
https://github.com/containerd/containerd/security…	external
https://access.redhat.com/security/cve/CVE-2026-53492	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496130	external
https://www.cve.org/CVERecord?id=CVE-2026-53492	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53492	external
https://github.com/containerd/containerd/security…	external
https://access.redhat.com/security/cve/CVE-2026-59869	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498122	external
https://www.cve.org/CVERecord?id=CVE-2026-59869	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59869	external
https://github.com/nodeca/js-yaml/commit/24f13e79…	external
https://github.com/nodeca/js-yaml/commit/59423c6f…	external
https://github.com/nodeca/js-yaml/releases/tag/3.15.0	external
https://github.com/nodeca/js-yaml/releases/tag/4.3.0	external
https://github.com/nodeca/js-yaml/security/adviso…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated images are now available for Red Hat Advanced Cluster Security\n(RHACS), which typically include new features, bug fixes, and/or\nsecurity patches.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "See the release notes (link in the references section) for a\ndescription of the fixes and enhancements in this particular release.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:48872",
        "url": "https://access.redhat.com/errata/RHSA-2026:48872"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
        "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41889",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41889"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-49478",
        "url": "https://access.redhat.com/security/cve/CVE-2026-49478"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-49978",
        "url": "https://access.redhat.com/security/cve/CVE-2026-49978"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-50163",
        "url": "https://access.redhat.com/security/cve/CVE-2026-50163"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53488"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index#about-this-release-4910_release-notes-49",
        "url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index#about-this-release-4910_release-notes-49"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48872.json"
      }
    ],
    "title": "Red Hat Security Advisory: RHACS 4.9.10 security and bug fix update",
    "tracking": {
      "current_release_date": "2026-08-04T21:57:20+00:00",
      "generator": {
        "date": "2026-08-04T21:57:20+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.8"
        }
      },
      "id": "RHSA-2026:48872",
      "initial_release_date": "2026-07-30T18:06:32+00:00",
      "revision_history": [
        {
          "date": "2026-07-30T18:06:32+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-01T08:08:43+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-04T21:57:20+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Advanced Cluster Security 4.9",
                "product": {
                  "name": "Red Hat Advanced Cluster Security 4.9",
                  "product_id": "Red Hat Advanced Cluster Security 4.9",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Advanced Cluster Security"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Ad147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1784283534"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256%3A2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-operator-bundle@sha256%3A50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Ab75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Acb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Aa43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1785413210"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1784283534"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256%3A5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Aa86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Ade53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Aada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1785413210"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Adf7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1784283534"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256%3A9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Aa1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Ae528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3Ae58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1785413210"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1784283534"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-main-rhel8@sha256%3A349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3Ac7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1784788409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1785413210"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
                "product": {
                  "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
                  "product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1785413210"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
          "product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
        },
        "product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64",
        "relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-13149",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-06-30T10:00:59.843854+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2494813"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "RHBZ#2494813",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
          "url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
        },
        {
          "category": "external",
          "summary": "https://www.npmjs.com/package/brace-expansion",
          "url": "https://www.npmjs.com/package/brace-expansion"
        }
      ],
      "release_date": "2026-06-30T08:30:34.502000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:06:32+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48872"
        },
        {
          "category": "workaround",
          "details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
    },
    {
      "cve": "CVE-2026-41889",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
      },
      "discovery_date": "2026-05-08T17:01:09.435496+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2468307"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pgx, a PostgreSQL driver and toolkit for Go. This SQL injection vulnerability can occur when using the non-default simple protocol, a dollar-quoted string literal in the SQL query, and when that string literal contains text interpreted as a placeholder with an attacker-controlled value. An attacker could potentially manipulate SQL queries, leading to a low impact on data integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/jackc/pgx: golang: pgx: SQL injection via specific SQL query conditions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has rated this flaw as Moderate because the SQL injection vulnerability in pgx can only be triggered when the non-default simple protocol is used in conjunction with specific query constructions involving PostgreSQL dollar-quoted string literals. Successful exploitation requires multiple uncommon preconditions, including attacker control of placeholder values within affected queries. As the issue is limited to particular application usage patterns and does not affect default pgx configurations, the overall risk is reduced despite the potential for query manipulation in vulnerable applications.The strongest argument for a Moderate rating is that this is not a generic SQL injection affecting all pgx users; it is a narrowly scoped flaw requiring a non-default mode and specific application behavior",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41889"
        },
        {
          "category": "external",
          "summary": "RHBZ#2468307",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468307"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41889",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41889"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41889",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41889"
        },
        {
          "category": "external",
          "summary": "https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da",
          "url": "https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da"
        },
        {
          "category": "external",
          "summary": "https://github.com/jackc/pgx/releases/tag/v5.9.2",
          "url": "https://github.com/jackc/pgx/releases/tag/v5.9.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/jackc/pgx/security/advisories/GHSA-j88v-2chj-qfwx",
          "url": "https://github.com/jackc/pgx/security/advisories/GHSA-j88v-2chj-qfwx"
        }
      ],
      "release_date": "2026-05-08T15:53:00.251000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:06:32+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48872"
        },
        {
          "category": "workaround",
          "details": "Avoid using the non-default simple protocol in applications that use the pgx PostgreSQL driver for Go. The vulnerability is contingent on this non-default protocol and specific SQL query constructs. Configuring applications to use the default extended protocol prevents this issue. If the simple protocol is necessary, ensure that dollar-quoted string literals do not contain attacker-controlled placeholder values.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/jackc/pgx: golang: pgx: SQL injection via specific SQL query conditions"
    },
    {
      "cve": "CVE-2026-49478",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-06-30T18:40:39+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499690"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Fulcio\u0027s OpenID Connect (OIDC) Discovery client. This vulnerability allows a remote attacker to perform Server-Side Request Forgery (SSRF) by redirecting discovery requests to internal systems. Additionally, an attacker can manipulate the JSON Web Key Set (JWKS) Uniform Resource Identifier (URI) to poison the verifier cache with malicious keys, enabling the validation of attacker-controlled signatures. Furthermore, the flaw can lead to the leakage of Kubernetes ServiceAccount tokens to third-party hosts through cross-host redirects or misconfigured MetaIssuers, potentially exposing sensitive cluster credentials.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/sigstore/fulcio: Fulcio: Server-Side Request Forgery and Kubernetes ServiceAccount token leakage",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in Fulcio\u0027s OIDC Discovery client. Three related vulnerabilities allow exploitation when a configured OIDC issuer is compromised or malicious: (1) Blind SSRF \u2014 the discovery client follows cross-host HTTP redirects, allowing a malicious issuer to redirect Fulcio\u0027s metadata fetch requests to internal-only systems (e.g., cloud IMDS endpoints, RFC 1918 addresses); (2) JWKS substitution \u2014 the redirected discovery flow can return a manipulated jwks_uri pointing to an attacker-controlled host, poisoning the verifier cache with attacker keys and enabling validation of attacker-controlled signatures; (3) Kubernetes ServiceAccount token leakage \u2014 the in-cluster SA token is attached globally by the HTTP transport, leaking it to third-party hosts during cross-host redirects or when wildcard MetaIssuers match external endpoints. Exploitation requires a compromised or malicious OIDC issuer already trusted in the Fulcio configuration. In typical Red Hat Trusted Artifact Signer deployments, OIDC issuers are explicitly configured and curated, reducing the attack surface.\"}]",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-49478"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499690",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499690"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-49478",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-49478"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49478",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49478"
        },
        {
          "category": "external",
          "summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f5mr-q85p-6hh6",
          "url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f5mr-q85p-6hh6"
        }
      ],
      "release_date": "2026-06-30T18:40:39+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:06:32+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48872"
        },
        {
          "category": "workaround",
          "details": "Upgrade to Fulcio v1.8.6 or later. No workaround is available.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/sigstore/fulcio: Fulcio: Server-Side Request Forgery and Kubernetes ServiceAccount token leakage"
    },
    {
      "cve": "CVE-2026-49978",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-07-14T21:05:26.253019+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a \u003ctemplate\u003e.content. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in DOMPurify is rated as Important as it allows for cross-site scripting (XSS) attacks. When DOMPurify performs in-place sanitization, it may fail to properly process shadow DOM content within `\u003ctemplate\u003e.content`, enabling an attacker to embed and execute malicious JavaScript. This could lead to unauthorized actions or information disclosure in Red Hat products that utilize DOMPurify for sanitizing untrusted HTML, MathML, or SVG.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-49978"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-49978",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-49978"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff",
          "url": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7",
          "url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7"
        },
        {
          "category": "external",
          "summary": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq",
          "url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq"
        }
      ],
      "release_date": "2026-07-14T20:02:46.263000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:06:32+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48872"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution"
    },
    {
      "cve": "CVE-2026-50163",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-07-01T21:35:45+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in oras-go, a Go library used for managing OCI (Open Container Initiative) artifacts. An attacker can exploit this vulnerability by providing a specially crafted tarball containing a malicious hardlink. When this tarball is extracted, the hardlink can be manipulated to point to files outside the intended extraction location, specifically within the victim\u0027s current working directory. This allows an attacker to read sensitive information from the system, and in some cases, could lead to unauthorized access to critical system files if the component is operating with elevated privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in oras-go. The ensureLinkPath tar extraction helper validates that a hardlink\u0027s target resolves inside the extract base directory, but returns the original unresolved target string instead of the validated path. When os.Link() is called with a relative Linkname, it resolves against the process\u0027s current working directory (CWD), not the extract directory. An attacker controlling an OCI registry can craft a tarball layer with a malicious hardlink entry whose relative Linkname escapes the extract directory, creating a hardlink to arbitrary files in the victim\u0027s CWD. Exploitation requires the victim to run `oras pull` (or code using the oras-go file store) against an attacker-controlled registry with auto-extract enabled (io.deis.oras.content.unpack annotation set to true). In typical Red Hat deployments, container registries are curated and trusted, reducing the likelihood of exploitation. The resulting hardlink shares an inode with the target file, allowing the attacker to read its contents through the extracted archive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-50163"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-50163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-50163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50163"
        },
        {
          "category": "external",
          "summary": "https://github.com/oras-project/oras-go/security/advisories/GHSA-fxhp-mv3v-67qp",
          "url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-fxhp-mv3v-67qp"
        }
      ],
      "release_date": "2026-07-01T21:35:45+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:06:32+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48872"
        },
        {
          "category": "workaround",
          "details": "Upgrade to oras-go v2.6.1 or later.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks"
    },
    {
      "cve": "CVE-2026-53488",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-07-01T02:01:09.589815+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2495815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "RHBZ#2495815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
        }
      ],
      "release_date": "2026-07-01T00:11:20.610000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:06:32+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48872"
        },
        {
          "category": "workaround",
          "details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
    },
    {
      "cve": "CVE-2026-53492",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-07-01T19:01:34.238078+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496130"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496130",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
        }
      ],
      "release_date": "2026-07-01T17:59:12.552000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:06:32+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48872"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
    },
    {
      "cve": "CVE-2026-59869",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-07-08T16:01:38.408322+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498122"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
          "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498122",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
          "url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
          "url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
        }
      ],
      "release_date": "2026-07-08T15:15:54.675000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-30T18:06:32+00:00",
          "details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:48872"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
          "product_ids": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0dbe34f8f684f0fa98bc40a85a2d22ac06f6c92ebf19d1d32e4544a15012011d_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:101fc7c1f78b9c024e59c89ddad49734de271c01c0c9cc74b440632bf2c3125a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a768baa1d550f4e200348b82b998e47dab787c2b9f01e77a09d8ff01a82b584_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:8669bcfafec38d9e49ce90a32def1eb74cfcbda54917d4eb1f8bb15d45e68c0e_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0072488e32544ac8727b3e29b0e60545beb895fe07a07ba3a608c19c925a71cf_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:735269356e2c466e7d6260e5f9b25da5fed4a63c03473dea9f9a98c5cd0b9d42_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d147656306796dd78887d039ca173543797c7c147c805f2bd5df15b3e4e8ba72_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:df7f4cd58b44e51110370a866c9b66dbdcad7ba2d7ab2f6225e93dcb961dca0a_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:349867ea5dec173408f68afaef3d57e556d09dea1b3a03923bc3a32c3d2dc96e_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5a3c968f2c6bfb3cdfb23ac714069cfbb43222ffcb3bdf3b0d2d3d4425dbd56a_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:9edd22028ee245414b20edb4ce65af446ff803207b883514e3991fdce67b71fd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:50473a07f0ee77e9ec073acb3f51ede534abeaf038f11c118223b81cc275c1f5_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2e2353e31fbe0379779fb67de39b06c43a0bff3a92199054d6f30e16b9ac0092_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:411711420af2f0f23c57818386a1bdb95440f7ff5d92cf127b21b365e3d6aca7_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4271a771fc35fa9c7aa1dba298e6d658337f3fab66c6a99625cdb8b20d11e4bb_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4b5eb6d15de1e991844f20c4a2bc3da5c62d066ba9bafcad9128ac8aa481bb59_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1336ba26d203bf1c7d1f590fd421f5291a2d85f0effbf4710952777ae0013022_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:56e4b785fb29de9f189d64439299ed46324949dfc0803f7a6f7187bb1c611be1_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a1fcac216ba5635e4bc0cdb696495b88eaa9a9ebaf3cf4612bd687f54c375051_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a86f0955aad8287ad7e9dcf5822acd59b81373d6626a88c825c4e1e303b90232_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2d20588e20a4333343ffe47e562ad49820728d8c4e578b1da438c7d67b593523_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d20aee1035d840db2e8cc4ea6586aeb353f7cdf0209f8aa4009027517afe618_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b75fd2452538cd8d586742dd99c7171ce2c1ee4930ae29c0d241cb529a0ec350_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de53c9e13e684f5b26db84671093fdfc466a921d81867674196053fe82a8b97d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:08e0e328657fc62e89c424e82e82d85d975e2eaee80e122f2ebca770d3c8795a_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7efc69bfb07aac91ae8e4022d667927ac1739274ffc2c4dcac0bd20bc64bb428_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:9761a210a1394c88a0c30dc160e81c559c8c804b1aa06e59aad3611ba48f320d_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:cb1791615523a2e53e6b424417e917d61bc988ba8146cb3767e23c0a1b588afc_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:0278ff0413b99c96a3f36a6722a88459be31700bc2fbe30099f92849d97341c2_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:405c559a83cd2a97f4238603ee8cc47897fee56d65200418d1ebd0521501e10f_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:58e779d5d591d3f209b003dabafa6699a2f1372e9880d038a059e99fb422ea4b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:e528c8a3d19568f26a6daa4ec51ebd81e73282fac75e9b5d90a0f579d95e656c_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:579250c78ab6fc0d99389e3689e86d577483c8c36d8216172e0fb105e8f1c10b_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6cd0d5477805a78d90b2e48784dec33a6d109b263b465a481d8f983b6e3a8f13_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8de4779eb37d0703d991c32e5a7ae8811545306e2eef14aa26d1877bb7ba0ebd_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:c7887a115063d89991d6d76f421cc40cc3368c770321804e34d524def5a33367_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:377d5c932df3cece09e644afefeafcb074ce40380df5e630e85cbabf71bfd118_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f63dbd0b67e479a129df7bd5562c4a2e817b56d414b41b4af3417c367452cae_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d4acb3cc1d9e244997754ed576c3f223aedd6420349105c17df6835b3080ade_arm64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e58237de624090c56ff7618e4abcb612abab477925fdd8b20d0e5ed8e845754e_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2da9dc9e797213d886b01e1adb658023a73f6f1525d24c53b1ee0c79efc929b4_s390x",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:52273eec2ca767313eaa007ec07fbdfea99af40ec62c06807c854763cdc8ab3b_ppc64le",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:a43d9fb2e797921c63b02a76281c13992347c19f4f026fd01292e1ac832c45d8_amd64",
            "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ada4d6ac25c2c005146b50e69e5aa06231cf607c61f4abf622365a8ef908a33a_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
    }
  ]
}

CVE-2026-13149 (GCVE-0-2026-13149)

Vulnerability from cvelistv5 – Published: 2026-06-30 08:30 – Updated: 2026-07-08 11:38

Summary

brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.

Severity

7.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-407 - Inefficient Algorithmic Complexity

Assigner

seal

References

2 references

URL	Tags
https://github.com/juliangruber/brace-expansion/c…
https://www.npmjs.com/package/brace-expansion

Impacted products

1 product

Vendor	Product	Version
juliangruber	brace-expansion	Affected: 0 , ≤ 5.0.6 (semver)

Credits

bnbdr

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-13149",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-30T12:43:12.568372Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-30T12:43:23.029Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://registry.npmjs.org",
          "defaultStatus": "unaffected",
          "packageName": "brace-expansion",
          "product": "brace-expansion",
          "repo": "https://github.com/juliangruber/brace-expansion",
          "vendor": "juliangruber",
          "versions": [
            {
              "lessThanOrEqual": "5.0.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "bnbdr"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding \u0027{}\u0027 brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work."
            }
          ],
          "value": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding \u0027{}\u0027 brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-469",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-469 HTTP DoS"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "YES",
            "Recovery": "USER",
            "Safety": "NEGLIGIBLE",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "PROOF_OF_CONCEPT",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400 Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-407",
              "description": "CWE-407 Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T11:38:35.974Z",
        "orgId": "22e2d327-25fe-45d7-9f0c-dcd23b7108df",
        "shortName": "seal"
      },
      "references": [
        {
          "url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
        },
        {
          "url": "https://www.npmjs.com/package/brace-expansion"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "22e2d327-25fe-45d7-9f0c-dcd23b7108df",
    "assignerShortName": "seal",
    "cveId": "CVE-2026-13149",
    "datePublished": "2026-06-30T08:30:34.502Z",
    "dateReserved": "2026-06-24T10:17:07.027Z",
    "dateUpdated": "2026-07-08T11:38:35.974Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-41889 (GCVE-0-2026-41889)

Vulnerability from cvelistv5 – Published: 2026-05-08 15:53 – Updated: 2026-05-08 19:38

Title

pgx: SQL Injection via placeholder confusion with dollar quoted string literals

Summary

pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that would be would be interpreted as a placeholder outside of a string literal, and the value of that placeholder is controllable by the attacker. This issue has been patched in version 5.9.2.

Severity

2.3 (Low)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/jackc/pgx/security/advisories/…	x_refsource_CONFIRM
https://github.com/jackc/pgx/commit/60644f84918a8…	x_refsource_MISC
https://github.com/jackc/pgx/releases/tag/v5.9.2	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
jackc	pgx	Affected: < 5.9.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-41889",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T19:38:09.336936Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T19:38:34.153Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pgx",
          "vendor": "jackc",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 5.9.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that would be would be interpreted as a placeholder outside of a string literal, and the value of that placeholder is controllable by the attacker. This issue has been patched in version 5.9.2."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T15:53:00.251Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/jackc/pgx/security/advisories/GHSA-j88v-2chj-qfwx",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/jackc/pgx/security/advisories/GHSA-j88v-2chj-qfwx"
        },
        {
          "name": "https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da"
        },
        {
          "name": "https://github.com/jackc/pgx/releases/tag/v5.9.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/jackc/pgx/releases/tag/v5.9.2"
        }
      ],
      "source": {
        "advisory": "GHSA-j88v-2chj-qfwx",
        "discovery": "UNKNOWN"
      },
      "title": "pgx: SQL Injection via placeholder confusion with dollar quoted string literals"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-41889",
    "datePublished": "2026-05-08T15:53:00.251Z",
    "dateReserved": "2026-04-22T15:11:54.671Z",
    "dateUpdated": "2026-05-08T19:38:34.153Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-49978 (GCVE-0-2026-49978)

Vulnerability from cvelistv5 – Published: 2026-07-14 20:02 – Updated: 2026-07-21 14:59

Title

DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content

Summary

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.7, DOMPurify IN_PLACE sanitization could skip shadow contents attached to an element inside <template>.content, allowing attacker-controlled markup such as event handlers, JavaScript URLs, or scripts to survive and execute when an application cloned and inserted the sanitized template. This issue is fixed in version 3.4.7.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

GitHub_M

References

3 references

URL	Tags
https://github.com/cure53/DOMPurify/security/advi…	x_refsource_CONFIRM
https://github.com/cure53/DOMPurify/commit/ca30f0…	x_refsource_MISC
https://github.com/cure53/DOMPurify/releases/tag/3.4.7	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
cure53	DOMPurify	Affected: < 3.4.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-49978",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-21T14:59:10.987336Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-21T14:59:20.582Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "DOMPurify",
          "vendor": "cure53",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.4.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.7, DOMPurify IN_PLACE sanitization could skip shadow contents attached to an element inside \u003ctemplate\u003e.content, allowing attacker-controlled markup such as event handlers, JavaScript URLs, or scripts to survive and execute when an application cloned and inserted the sanitized template. This issue is fixed in version 3.4.7."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "ACTIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-14T20:02:46.263Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq"
        },
        {
          "name": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff"
        },
        {
          "name": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7"
        }
      ],
      "source": {
        "advisory": "GHSA-rp9w-3fw7-7cwq",
        "discovery": "UNKNOWN"
      },
      "title": "DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside \u003ctemplate\u003e.content"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-49978",
    "datePublished": "2026-07-14T20:02:46.263Z",
    "dateReserved": "2026-06-02T18:30:51.281Z",
    "dateUpdated": "2026-07-21T14:59:20.582Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-50163 (GCVE-0-2026-50163)

Vulnerability from cvelistv5 – Published: 2026-07-17 19:36 – Updated: 2026-07-20 15:01

Title

oras-go: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution in `oras-go` tar extraction

Summary

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link("victim.secret", "<extract_base>/payload.tar.gz/evil_cwd_link") to resolve header.Linkname against the process current working directory for a Typeflag=TypeLink entry such as Name=payload.tar.gz/evil_cwd_link and Linkname="victim.secret" with io.deis.oras.content.unpack: "true", which can expose or tamper with files such as .env, .git/config, .aws/credentials, and ~/.ssh/config. This issue is fixed in version 2.6.2.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

GitHub_M

References

4 references

URL	Tags
https://github.com/oras-project/oras-go/security/…	x_refsource_CONFIRM
https://github.com/oras-project/oras-go/pull/1232	x_refsource_MISC
https://github.com/oras-project/oras-go/commit/c4…	x_refsource_MISC
https://github.com/oras-project/oras-go/releases/…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
oras-project	oras-go	Affected: < 2.6.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-50163",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-20T15:00:48.168210Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-20T15:01:16.630Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-fxhp-mv3v-67qp"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "oras-go",
          "vendor": "oras-project",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.6.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link(\"victim.secret\", \"\u003cextract_base\u003e/payload.tar.gz/evil_cwd_link\") to resolve header.Linkname against the process current working directory for a Typeflag=TypeLink entry such as Name=payload.tar.gz/evil_cwd_link and Linkname=\"victim.secret\" with io.deis.oras.content.unpack: \"true\", which can expose or tamper with files such as .env, .git/config, .aws/credentials, and ~/.ssh/config. This issue is fixed in version 2.6.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-17T19:36:01.254Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/oras-project/oras-go/security/advisories/GHSA-fxhp-mv3v-67qp",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-fxhp-mv3v-67qp"
        },
        {
          "name": "https://github.com/oras-project/oras-go/pull/1232",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/oras-project/oras-go/pull/1232"
        },
        {
          "name": "https://github.com/oras-project/oras-go/commit/c463c654ab3ef34422c1764cd619806cebf20451",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/oras-project/oras-go/commit/c463c654ab3ef34422c1764cd619806cebf20451"
        },
        {
          "name": "https://github.com/oras-project/oras-go/releases/tag/v2.6.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/oras-project/oras-go/releases/tag/v2.6.2"
        }
      ],
      "source": {
        "advisory": "GHSA-fxhp-mv3v-67qp",
        "discovery": "UNKNOWN"
      },
      "title": "oras-go: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution in `oras-go` tar extraction"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-50163",
    "datePublished": "2026-07-17T19:36:01.254Z",
    "dateReserved": "2026-06-03T20:54:20.432Z",
    "dateUpdated": "2026-07-20T15:01:16.630Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-53488 (GCVE-0-2026-53488)

Vulnerability from cvelistv5 – Published: 2026-07-01 00:11 – Updated: 2026-07-03 03:56

Title

containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull

Summary

containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config (LABEL instruction in Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host, via a plugin that consumes container labels for some operations. This issue has been fixed in versions 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10.

Severity

9.4 (Critical)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-20 - Improper Input Validation

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/containerd/containerd/security…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
containerd	containerd	Affected: < 1.7.33 Affected: >= 2.0.0, < 2.0.10 Affected: >= 2.1.0, < 2.1.9 Affected: >= 2.2.0, < 2.2.5 Affected: >= 2.3.0, < 2.3.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-53488",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-02T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-03T03:56:07.868Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "containerd",
          "vendor": "containerd",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.7.33"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.0.0, \u003c 2.0.10"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.1.0, \u003c 2.1.9"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.2.0, \u003c 2.2.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.3.0, \u003c 2.3.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config (LABEL instruction in Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host, via a plugin that consumes container labels for some operations. This issue has been fixed in versions 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 9.4,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T00:11:20.610Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
        }
      ],
      "source": {
        "advisory": "GHSA-xhf5-7wjv-pqxp",
        "discovery": "UNKNOWN"
      },
      "title": "containerd CRI plugin: \u2014 image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-53488",
    "datePublished": "2026-07-01T00:11:20.610Z",
    "dateReserved": "2026-06-09T17:05:25.059Z",
    "dateUpdated": "2026-07-03T03:56:07.868Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-53492 (GCVE-0-2026-53492)

Vulnerability from cvelistv5 – Published: 2026-07-01 17:59 – Updated: 2026-07-02 12:50

Title

containerd CRI checkpoint restore CDI annotation smuggling

Summary

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a checkpoint, containerd preserves CDI-related annotations from the checkpoint archive rather than relying solely on the pod's create-time specification. This allows a user with pod creation permissions to bypass standard Kubernetes resource allocation and device plugin enforcement, injecting arbitrary CDI edits (such as device nodes and host mounts) into the restored container. Successful exploitation requires that the node has CDI enabled and contains a matching host CDI specification for the requested device; environments where CDI is disabled or lacking sensitive device specifications are not affected. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.

Severity

8.4 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-20 - Improper Input Validation
CWE-863 - Incorrect Authorization

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/containerd/containerd/security…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
containerd	containerd	Affected: >= 2.1.0, < 2.1.9 Affected: >= 2.2.0, < 2.2.5 Affected: >= 2.3.0, < 2.3.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-53492",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-02T12:50:36.308393Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-02T12:50:43.273Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "containerd",
          "vendor": "containerd",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.1.0, \u003c 2.1.9"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.2.0, \u003c 2.2.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.3.0, \u003c 2.3.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a checkpoint, containerd preserves CDI-related annotations from the checkpoint archive rather than relying solely on the pod\u0027s create-time specification. This allows a user with pod creation permissions to bypass standard Kubernetes resource allocation and device plugin enforcement, injecting arbitrary CDI edits (such as device nodes and host mounts) into the restored container. Successful exploitation requires that the node has CDI enabled and contains a matching host CDI specification for the requested device; environments where CDI is disabled or lacking sensitive device specifications are not affected. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863: Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-01T17:59:12.552Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
        }
      ],
      "source": {
        "advisory": "GHSA-33vj-92qq-66hc",
        "discovery": "UNKNOWN"
      },
      "title": "containerd CRI checkpoint restore CDI annotation smuggling"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-53492",
    "datePublished": "2026-07-01T17:59:12.552Z",
    "dateReserved": "2026-06-09T17:05:25.059Z",
    "dateUpdated": "2026-07-02T12:50:43.273Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-59869 (GCVE-0-2026-59869)

Vulnerability from cvelistv5 – Published: 2026-07-08 15:15 – Updated: 2026-07-09 15:14

Title

js-yaml: YAML merge-key chains can force quadratic CPU consumption

Summary

js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in versions 3.15.0 and 4.3.0.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

GitHub_M

References

5 references

URL	Tags
https://github.com/nodeca/js-yaml/security/adviso…	x_refsource_CONFIRM
https://github.com/nodeca/js-yaml/commit/24f13e79…	x_refsource_MISC
https://github.com/nodeca/js-yaml/commit/59423c6f…	x_refsource_MISC
https://github.com/nodeca/js-yaml/releases/tag/3.15.0	x_refsource_MISC
https://github.com/nodeca/js-yaml/releases/tag/4.3.0	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
nodeca	js-yaml	Affected: >= 3.0.0, < 3.15.0 Affected: >= 4.0.0, < 4.3.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59869",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T15:14:16.302841Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T15:14:29.753Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "js-yaml",
          "vendor": "nodeca",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.0.0, \u003c 3.15.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 4.3.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in versions 3.15.0 and 4.3.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T15:15:54.675Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
        }
      ],
      "source": {
        "advisory": "GHSA-52cp-r559-cp3m",
        "discovery": "UNKNOWN"
      },
      "title": "js-yaml: YAML merge-key chains can force quadratic CPU consumption"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-59869",
    "datePublished": "2026-07-08T15:15:54.675Z",
    "dateReserved": "2026-07-07T15:41:53.607Z",
    "dateUpdated": "2026-07-09T15:14:29.753Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

RHSA-2026:48872

CVE-2026-13149 (GCVE-0-2026-13149)

CVE-2026-41889 (GCVE-0-2026-41889)

CVE-2026-49978 (GCVE-0-2026-49978)

CVE-2026-50163 (GCVE-0-2026-50163)

CVE-2026-53488 (GCVE-0-2026-53488)

CVE-2026-53492 (GCVE-0-2026-53492)

CVE-2026-59869 (GCVE-0-2026-59869)

Tags

Sightings

Nomenclature