RHSA-2026:54500

Vulnerability from csaf_redhat - Published: 2026-08-13 08:02 - Updated: 2026-09-26 12:16
Summary
Red Hat Security Advisory: OpenShift Compliance Operator bug fix and enhancement update
Severity
Important
Notes
Topic: An updated OpenShift Compliance Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog.
Details: The OpenShift Compliance Operator v1.9.2 is now available. See the documentation for bug fix information: https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/security_and_compliance/compliance-operator#compliance-operator-release-notes
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-27145

A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Product Identifier Version Remediation
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64 —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64 —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64 —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64 —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64 —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64 —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64 —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64 —
Workaround
Unresolved product id: OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x —
Workaround
Threats
Impact Important
CVE-2026-33811

A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1341 - Multiple Releases of Same Resource or Handle
Affected products
Fixed 1 product, the same list as for CVE-2026-27145
Known not affected 16 products, the same list as for CVE-2026-27145
Threats
Impact Important
CVE-2026-42504

A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 1 product, the same list as for CVE-2026-27145
Known not affected 16 products, the same list as for CVE-2026-27145
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:54500 self
https://access.redhat.com/security/cve/CVE-2026-27145 external
https://access.redhat.com/security/cve/CVE-2026-33811 external
https://access.redhat.com/security/cve/CVE-2026-42504 external
https://access.redhat.com/security/updates/classi… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-27145 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484207 external
https://www.cve.org/CVERecord?id=CVE-2026-27145 external
https://nvd.nist.gov/vuln/detail/CVE-2026-27145 external
https://go.dev/cl/783621 external
https://go.dev/issue/79694 external
https://groups.google.com/g/golang-announce/c/tKs… external
https://pkg.go.dev/vuln/GO-2026-5037 external
https://access.redhat.com/security/cve/CVE-2026-33811 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467822 external
https://www.cve.org/CVERecord?id=CVE-2026-33811 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33811 external
https://go.dev/cl/767860 external
https://go.dev/issue/78803 external
https://groups.google.com/g/golang-announce/c/qcC… external
https://pkg.go.dev/vuln/GO-2026-4981 external
https://access.redhat.com/security/cve/CVE-2026-42504 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484204 external
https://www.cve.org/CVERecord?id=CVE-2026-42504 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42504 external
https://go.dev/cl/774481 external
https://go.dev/issue/79217 external
https://pkg.go.dev/vuln/GO-2026-5038 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated OpenShift Compliance Operator image that fixes various bugs and adds new\nenhancements is now available for the Red Hat OpenShift Enterprise 4 catalog.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The OpenShift Compliance Operator v1.9.2 is now available.\nSee the documentation for bug fix information:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/security_and_compliance/compliance-operator#compliance-operator-release-notes",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:54500",
        "url": "https://access.redhat.com/errata/RHSA-2026:54500"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54500.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Compliance Operator bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-09-26T12:16:35+00:00",
      "generator": {
        "date": "2026-09-26T12:16:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:54500",
      "initial_release_date": "2026-08-13T08:02:40+00:00",
      "revision_history": [
        {
          "date": "2026-08-13T08:02:40+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-04T00:36:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-26T12:16:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "OpenShift Compliance Operator 1",
                "product": {
                  "name": "OpenShift Compliance Operator 1",
                  "product_id": "OpenShift Compliance Operator 1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_compliance_operator:1::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "OpenShift Compliance Operator"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-operator-bundle@sha256%3Abfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95?arch=amd64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-operator-bundle\u0026tag=1786380082"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-content-rhel8@sha256%3A8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26?arch=amd64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-content-rhel8\u0026tag=1786360477"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-must-gather-rhel8@sha256%3A5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81?arch=amd64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8\u0026tag=1786378055"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-openscap-rhel8@sha256%3A10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823?arch=amd64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-openscap-rhel8\u0026tag=1786378410"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-rhel8-operator@sha256%3Ac240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1?arch=amd64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-rhel8-operator\u0026tag=1786378039"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-content-rhel8@sha256%3A3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd?arch=arm64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-content-rhel8\u0026tag=1786360477"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-must-gather-rhel8@sha256%3A533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb?arch=arm64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8\u0026tag=1786378055"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-openscap-rhel8@sha256%3A74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9?arch=arm64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-openscap-rhel8\u0026tag=1786378410"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-rhel8-operator@sha256%3A971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79?arch=arm64\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-rhel8-operator\u0026tag=1786378039"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-content-rhel8@sha256%3A0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb?arch=ppc64le\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-content-rhel8\u0026tag=1786360477"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-must-gather-rhel8@sha256%3Aa01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499?arch=ppc64le\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8\u0026tag=1786378055"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-openscap-rhel8@sha256%3A88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b?arch=ppc64le\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-openscap-rhel8\u0026tag=1786378410"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-rhel8-operator@sha256%3A3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987?arch=ppc64le\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-rhel8-operator\u0026tag=1786378039"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-content-rhel8@sha256%3Aa9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a?arch=s390x\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-content-rhel8\u0026tag=1786360477"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-must-gather-rhel8@sha256%3A52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2?arch=s390x\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8\u0026tag=1786378055"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-openscap-rhel8@sha256%3Aab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55?arch=s390x\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-openscap-rhel8\u0026tag=1786378410"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x",
                "product": {
                  "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x",
                  "product_id": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift-compliance-rhel8-operator@sha256%3Ad5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1?arch=s390x\u0026repository_url=registry.redhat.io/compliance/openshift-compliance-rhel8-operator\u0026tag=1786378039"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64 as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x as a component of OpenShift Compliance Operator 1",
          "product_id": "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x"
        },
        "product_reference": "registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x",
        "relates_to_product_reference": "OpenShift Compliance Operator 1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-27145",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-02T23:01:08.992540+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484207"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64"
        ],
        "known_not_affected": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484207",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/783621",
          "url": "https://go.dev/cl/783621"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79694",
          "url": "https://go.dev/issue/79694"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5037",
          "url": "https://pkg.go.dev/vuln/GO-2026-5037"
        }
      ],
      "release_date": "2026-06-02T22:01:36.954000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-13T08:02:40+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your\nsystem have been applied. For details on how to apply this update, refer to:\n  \nhttps://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:54500"
        },
        {
          "category": "workaround",
          "details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
    },
    {
      "cve": "CVE-2026-33811",
      "cwe": {
        "id": "CWE-1341",
        "name": "Multiple Releases of Same Resource or Handle"
      },
      "discovery_date": "2026-05-07T20:01:34.913869+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467822"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64"
        ],
        "known_not_affected": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467822",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767860",
          "url": "https://go.dev/cl/767860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78803",
          "url": "https://go.dev/issue/78803"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4981",
          "url": "https://pkg.go.dev/vuln/GO-2026-4981"
        }
      ],
      "release_date": "2026-05-07T19:41:19.285000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-13T08:02:40+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your\nsystem have been applied. For details on how to apply this update, refer to:\n  \nhttps://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:54500"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
    },
    {
      "cve": "CVE-2026-42504",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-06-02T23:01:00.320527+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484204"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64"
        ],
        "known_not_affected": [
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
          "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484204",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/774481",
          "url": "https://go.dev/cl/774481"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79217",
          "url": "https://go.dev/issue/79217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5038",
          "url": "https://pkg.go.dev/vuln/GO-2026-5038"
        }
      ],
      "release_date": "2026-06-02T22:01:37.219000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-13T08:02:40+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your\nsystem have been applied. For details on how to apply this update, refer to:\n  \nhttps://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:54500"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
          "product_ids": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:0e92582024f42a1e8836b6e5bd0e8125c4f90345019febb01aef3fc3d18819eb_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:3abf963f35712afd8fe476e32b1f9f3318b0e1d84f5d6e31059fa439baed2afd_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:8823d451e5cc3925e0b3b08f62ae44db0b98ed616f2bc12a34a21055245fac26_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:a9831e3a9099684b681fe9db5ee3319b5694aaa2e18728bc1f5f646843b4593a_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:52ec7d078b31a8b8c4a465414ffc9f3071f05d31d7463c008520606ea0e5eba2_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:533549b13f642dae060e2f280d1e95fd74e614629323207e7072555d44f741cb_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:5c8a3c4145373a8692dafef3a2c4d7d234833f0cf088d835a27d4d6047f38c81_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:a01373b1502c4422ac2d749b349128cbe474c8ebe9259bd16531a010e80cc499_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:10920bf717fb38a7b6e3f30605b4f21f27e7263304b4aee2b2f54c65c875b823_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:74009399da69bf6e4cf73acd8dab59e75a9113d3445731e3278e2c4f532448e9_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:88163c2079ef72fc3d4d862b0ee00e67b5daed69efea36c1add970c86fec098b_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:ab42a8cf28e8d99b1a00236c2f3b135bc410d0b923d9da6d82bc8f9fb0983d55_s390x",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:bfe946d2878a37624641a92ed538c77861c355fb4a44a387944d988feca7ca95_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:3680c7063c60ba00998a6bfdf4598d7938e365eb9e736be7ce369df04489d987_ppc64le",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:971ded98dfecc78d23a4e6cf3370918b3293c1fae1098f7bf1f97437895b9b79_arm64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:c240c2c93f0ecec98896bec956beb5b50deb8e5d20792cbcbe055e76b7587de1_amd64",
            "OpenShift Compliance Operator 1:registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:d5ef91916dfe6d39b74ffaa8e21eaf681580668616ecfda2aabe7feec7b0a8e1_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.