RHSA-2026:53763

Vulnerability from csaf_redhat - Published: 2026-08-11 17:18 - Updated: 2026-08-12 21:44
Summary
Red Hat Security Advisory: OpenShift Virtualization v4.20 Images
Severity
Important
Notes
Topic: Red Hat OpenShift Virtualization release v4.20 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization v4.20 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel dereferences it, defeating the intended no-follow protection. An attacker with access to a virt-launcher pod can exploit this to redirect virt-handler's IPC socket connections, including the notify socket used for VM domain lifecycle events. By hijacking this socket, the attacker can inject arbitrary domain events into virt-handler, causing it to take incorrect lifecycle actions, corrupt VM state in the Kubernetes API, or crash — resulting in sustained denial of VM management services for all virtual machines on the affected node. Additionally, the same symlink following flaw allows virt-handler to apply file ownership or permission changes to unintended host paths.

CWE-61 - UNIX Symbolic Link (Symlink) Following
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64
Workaround
Threats
Impact Moderate

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.

CWE-551 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64
Workaround
Unresolved product id: Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64
Workaround
Threats
Impact Important

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Virtualization release v4.20 is now available with updates to packages and images that fix several bugs and add enhancements.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.20 images.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:53763",
        "url": "https://access.redhat.com/errata/RHSA-2026:53763"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-13201",
        "url": "https://access.redhat.com/security/cve/CVE-2026-13201"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53763.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Virtualization v4.20 Images",
    "tracking": {
      "current_release_date": "2026-08-12T21:44:58+00:00",
      "generator": {
        "date": "2026-08-12T21:44:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.14"
        }
      },
      "id": "RHSA-2026:53763",
      "initial_release_date": "2026-08-11T17:18:54+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T17:18:54+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-11T17:19:06+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-12T21:44:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Container Native Virtualization 4.20",
                "product": {
                  "name": "Red Hat Container Native Virtualization 4.20",
                  "product_id": "Red Hat Container Native Virtualization 4.20",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:container_native_virtualization:4.20::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Container Native Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3Aca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1785831745"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1785831655"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3A1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1785835705"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pr-helper-rhel9@sha256%3A3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1785832409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/sidecar-shim-rhel9@sha256%3Ab50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1785831732"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-api-rhel9@sha256%3Aeed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1785831215"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1785832254"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-controller-rhel9@sha256%3Ad9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1785831119"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3Ae37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1785834070"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1785831074"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-handler-rhel9@sha256%3A74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1785831334"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-launcher-rhel9@sha256%3A8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1785832905"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-operator-rhel9@sha256%3Aa7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1785831832"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-synchronization-controller-rhel9@sha256%3A925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9\u0026tag=1785831492"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3Ab69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1785831745"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3Af670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1785831655"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3Ae3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1785835705"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pr-helper-rhel9@sha256%3Aaed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1785832409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/sidecar-shim-rhel9@sha256%3A2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1785831732"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-api-rhel9@sha256%3Aeaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1785831215"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1785832254"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-controller-rhel9@sha256%3Adea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1785831119"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1785834070"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportserver-rhel9@sha256%3Ab6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1785831074"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-handler-rhel9@sha256%3A5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1785831334"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-launcher-rhel9@sha256%3A178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1785832905"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-operator-rhel9@sha256%3Ac48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1785831832"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-synchronization-controller-rhel9@sha256%3A3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9\u0026tag=1785831492"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1785831745"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1785831655"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3A0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1785835705"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pr-helper-rhel9@sha256%3A8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1785832409"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/sidecar-shim-rhel9@sha256%3Aa3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1785831732"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-api-rhel9@sha256%3A59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1785831215"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1785832254"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-controller-rhel9@sha256%3A4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1785831119"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1785834070"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1785831074"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-handler-rhel9@sha256%3A22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1785831334"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-launcher-rhel9@sha256%3A75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1785832905"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-operator-rhel9@sha256%3Ac84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1785831832"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x",
                "product": {
                  "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x",
                  "product_id": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-synchronization-controller-rhel9@sha256%3A065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4?arch=s390x\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9\u0026tag=1785831492"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64 as a component of Red Hat Container Native Virtualization 4.20",
          "product_id": "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64"
        },
        "product_reference": "registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64",
        "relates_to_product_reference": "Red Hat Container Native Virtualization 4.20"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Huzaifa Sidhpurwala"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2026-13201",
      "cwe": {
        "id": "CWE-61",
        "name": "UNIX Symbolic Link (Symlink) Following"
      },
      "discovery_date": "2026-06-24T13:52:04.691000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2492203"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in KubeVirt\u0027s safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel dereferences it, defeating the intended no-follow protection. An attacker with access to a virt-launcher pod can exploit this to redirect virt-handler\u0027s IPC socket connections, including the notify socket used for VM domain lifecycle events. By hijacking this socket, the attacker can inject arbitrary domain events into virt-handler, causing it to take incorrect lifecycle actions, corrupt VM state in the Kubernetes API, or crash \u2014 resulting in sustained denial of VM management services for all virtual machines on the affected node. Additionally, the same symlink following flaw allows virt-handler to apply file ownership or permission changes to unintended host paths.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level VM disruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in KubeVirt\u0027s safepath package where OpenAtNoFollow obtains a file descriptor to a leaf symlink using O_PATH|O_NOFOLLOW, then downstream operations resolve the path via /proc/self/fd/N which dereferences the symlink, defeating the intended no-follow protection.\n\nThe primary impact is through notify socket hijacking: virt-handler uses safepath to resolve the path to the notify socket inside each virt-launcher pod. A namespace-level tenant with pod access can replace this socket path with a symlink to an attacker-controlled socket, enabling injection of arbitrary VM domain lifecycle events. Since virt-handler treats this as a trusted IPC channel, injected events are processed without validation and propagated to the Kubernetes API as VMI status updates. This allows the attacker to trigger incorrect VM lifecycle actions (shutdowns, restarts, migrations), corrupt VMI resource state, or crash the virt-handler process through malformed events. Because virt-handler is a single DaemonSet pod per node, a sustained crash loop denies VM management services \u2014 including console access, live migration, and lifecycle operations \u2014 for all virtual machines on that node.\n\nA secondary impact exists through the chown/chmod path: virt-handler (running as root on the node) can be tricked into applying file ownership or permission changes to arbitrary host files with hardcoded values. This modification is blind \u2014 the attacker cannot read or write file contents and remains confined to the container. In default OpenShift Virtualization deployments, SELinux mandatory access controls and RHCOS immutable filesystem layers limit the set of targetable host files.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13201"
        },
        {
          "category": "external",
          "summary": "RHBZ#2492203",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492203"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13201",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13201"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13201",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13201"
        }
      ],
      "release_date": "2026-06-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T17:18:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53763"
        },
        {
          "category": "workaround",
          "details": "The following measures reduce the attacker pool and limit secondary impact:\n\nReview RBAC policies to restrict pods/exec permissions on virt-launcher pods to only those users who strictly require it. This reduces the number of identities that can place symlinks in the launcher filesystem.\nEnsure SELinux is in enforcing mode (default in OpenShift). While SELinux does not prevent the notify socket hijacking path, it restricts the set of host files targetable through the chown/chmod path by blocking operations on files with protected security labels.\nRHCOS immutable filesystem layers prevent modification of core OS files through the chown/chmod path.\nNote: no mitigation currently addresses the notify socket hijacking vector. The attacker\u0027s ability to inject domain events into virt-handler is not constrained by SELinux or filesystem immutability.",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level VM disruption"
    },
    {
      "cve": "CVE-2026-33186",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-03-20T23:02:27.802640+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2449833"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x"
        ],
        "known_not_affected": [
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64",
          "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "RHBZ#2449833",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
        }
      ],
      "release_date": "2026-03-20T22:23:32.147000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-11T17:18:54+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:53763"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
          "product_ids": [
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:5885a1074a3a65b4738e645330e859b598633099d07c752de587742c4910972c_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b69427db5e3a68edfb5f733acb785e3a1eeccfc45cab8754e4f4c5106e5f5afe_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:ca8bdcb57fbd508abd84a8f90ddf8814ba90c48260ab0487912cd73446e860b9_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:035d9d574bbd049c8f78f6eb5e60e187b71c58338a7675d94af313b490fde55e_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:8a18299a120af78a290db514378a79d0c92b98ab2f85c1b9c57380dae521445f_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:f670603d4d39f8e935bb699380a656ed411c3a9bab4e3cccc576cb5e2ca05a03_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:0c5cb766e878638b908ef02dba80e7a8fa052f9bf5ed9524864d40f9643b7afc_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:1709a7d2d244242522129bbde3df1747f9bdbdf3864326ee8b433bbfc3739609_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e3ecb267c56c3cf6b1aeee43b675844546fd2dd3bbbec2d480ceca0044fd1d28_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:3c4564a91c58287af63e4640db353e42c843c3a12c0ff13321fee26046d8965e_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:8bcc028dcc826e11f1805d2a49b575a4e19524ce94827cc6748e661f6149329e_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:aed9e1f8ef852872bc865e88dca4c7dd3c5b6850bfd6608d2339f831f14cf112_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:2484a6c137f63d51400a9eae1280d0732c6ff138f38b767e6630769a1a663752_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a3834d4c533a619718fd30eaa7caf8f642d3f611dd38cc2e0896c8f45f4e1d64_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:b50eb1aefdbacf6c44ea64bfa4769b21f5352ff455e7345a3a558fb797b325ba_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:59002673312121d9446b2198c640ab8619c73b51daf6ea0ee83c0ed6e4d0e552_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eaf455f757f4ae47efa9aab416cc49dfdf5bd6b380672c957554617dfcf8c263_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:eed15c476ec896f6a78cd588c789c6ba2c7cadf924610fe56a147645beb0bf25_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:43ffd77478055bce8805d6581315c143eb5cd6f5eece252091cf5ce7262da23b_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:46be6670bbf26ca082095821c2701e2955255afd1e38ccdd9c14a71170e346ab_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6b7eeba222f54ce24528afcc14ab4fd4a0b62a05e284bb7533d859275e2b6252_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:4a466a7cfb37b925d1ef7c0f49624479e93127beffd120fb8fd0192dc44af9c8_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d9a57850eb1b31a01271c2b574ec2ecf88c05df555aac0ec67c6f7b41ca3c45a_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dea4c39f0dcbb57384a1bb3b620fd116aad31ad226d9ab97c0568075b0890936_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:02a31da1a264f0caf4db820db1f6423f769628cad7f6e4740d725b907725c129_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:18681858e47d4d2d169bf21bfacd943f0029a60bdf423664d5dd62a4514a88ea_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e37554e0deab3f352e85b07fb5f22f0eee229de28ff690072f82ca9aeae57e07_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:00f49bb2a1cd0110d8240ca63d2a2e54f03453c2496fce7115dd00013691ea99_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:354c24e67866c4ea5c90d3ed5b47e6a356e5df476c340650b99f08f8649e60ad_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b6a04f11b483e56ff274c06b1e37dc21857b5f4f4894ae1fbdbd911e4e8044ee_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:22813de64d0e84013b5f2a1b1699888f952f317913a4d755e2e9e76ca61d809d_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5b32246480ab2732aad524a1353857f6254a6693712f325d12b6e4f61244ad28_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:74d84856f22700bb735e97b2d721080f66908c29264ded38a2c3b5cd502fce70_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:178ba150df90ca3cadd9878b4f42064b82b7a52690c2c5ce3ad0f77ff81e11ef_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:75c3c9838700a4f6375d15a6661eb8ab93ed19987be7b60a2d40542b0b94d2c9_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:8f1fb98936f8a465ed69a7e681492d9bfecd7a1693fd24f82b14f96f4c481071_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:a7e5816d96edfa90718aa604bde92854a300f46e8aa6f8ebe886bfc3cb91893f_amd64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c48048fa552109936e097e309eb6fea6fac7919aafdc55dc8f99cf7a0ff5dea1_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:c84bd6dbe5bc900d921818ebac67f2b8a751295b28be051e9e18ad131cd76de3_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:065c8b85d4ffa566a8c6d8fac68ae31f30e75de132104d28f529a64dfdcb7ef4_s390x",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:3f89e89a360c083c2677611b9781acd67e0104d6b9e258c9e904d8f8b7a3cfc2_arm64",
            "Red Hat Container Native Virtualization 4.20:registry.redhat.io/container-native-virtualization/virt-synchronization-controller-rhel9@sha256:925f744df66b75b27e583ef73b516dbc2fadbe94b9923e4676d2ae91221d7af7_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Loading…