Vulnerability-Lookup

RHSA-2026:59557

Vulnerability from csaf_redhat - Published: 2026-08-25 18:46 - Updated: 2026-09-14 05:27

Summary

Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.6 security update

Severity

Important

Notes

Topic: Red Hat multicluster engine for Kubernetes v2.10 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.

Details: The multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2024-45336

A flaw was found in the net/http package of the Golang standard library. The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to `a.com/` containing an Authorization header redirected to `b.com/` will not send that header to `b.com`. However, the sensitive headers would be restored if the client received a subsequent same-domain redirect. For example, a chain of redirects from `a.com/`, to `b.com/1`, and finally to `b.com/2` would incorrectly send the Authorization header to `b.com/2`.

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 52 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:120becd4f1b2a36f48a43d2933b7a1be1595cc2cb626d44a053033d010e6aac7_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:610df72fa91b7ff983c5698c08462a2c77ec60d2940e8c0048054d14fd0a3e31_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:675af2b54df773d590a2543225c7c5cce1e9a6b0f3651a8e454c02dde506a580_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b69db5c2aac4decf99a4c97c09e9c7055b642c4849f7e78d74f78877702428e8_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:4f7f8515509882b36a95c109fb5372de195bf28924d5bce0ddfe025f71d597b3_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:94b883cd401a08efc1cffcdb0d72637066662dbbb87ea333fec50e04398df716_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d7a5a53e94a0c5f871c01081b472d2973b7740a05b15dae7cafaeef793790a7a_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f920481f708996edbc4ddc82bda2ea6c184a6adca21bd3d258ce0a5034318b56_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:1df9a040f6eaacaca9dfdabed3de15fc7a10bcb0d7cdb12fb64db008a3a87d55_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:57466b1054122ae9d616104cd3c41f8d3c1a3c510e7cc2578923ee3daaa8060c_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:598bbc8b366f87d23ff4e62a2144adb90b6ef302b4e7efe7651b3a2a7bfa5858_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:de654aef03a61d18db6b5806d0397a2ea913f001341c0f71d0048bbded160990_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5cfefcf34e2b6aaa3007aa6e23833ec6bf807fcc917068fb20dd2d24ad928ebc_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8dba2033ba3161d00121961cdb86a5d4d96c05a873b9ccb6b1492a0e6e3d63b4_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:acd380102a9470c92bf5579445548ec59f506a8357638e528ebde1486d7d2f7a_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ed3dda6f99cb789b2fcd00768a8992fdaefd66eedc13091b4ec71636ae45180f_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:093fdac33650bc2d1d136024d0082ca6d527319c49372e7dcc62a01048ad8265_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2d21aab8de8ba00af7049f5cc1150f341c20b9c4f4607a9ce12bf898791318ef_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a74a7e175474586c81ecd58e9858b5ce68930b2926ae164dc94bdc42746edf5f_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:b2c522e77061272aec9209b53474f1522239b114c62033600491fe5c7343207b_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:8e727ff6fc10dca05724d0ef32facd52c714e41d32cbbdee66dd9a119d48a63c_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b67bc5198e5e716839d323b4f198d69a1f05fb6686200ec81fc3790c2f4040c3_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b80db1eec52e300101e990f786491111660a6abc08247646b76d3e7814d5d39e_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d4d40fb6beaf5e3bc9c9a5e0e50432c64d7fbcb01a2be3ce04a263d14ee28ccd_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4de85fb645c49673a188cf16d9c5f60f6c22165f2c17d9d9575a261156895628_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e5daf53e758944f1bd73189320af6df8c73a1288990dbd9fab71617b417eec4_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:7e9cea4d99b8199f55c3568e7df4735e809434da82015a554ec30c31a21eda49_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:b2c33fa73936ff22062bfe1b223f4ec9cfd9262b583e2909f1b893fa886a91f3_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:43c08b788b7685a00b7a3c2b42b9d84e321ae1a007eb283a67d89c64332728ad_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:854b5ffea55e0fba6c4670a3c7b4a5294109cdad00f4eec01c7324748abec404_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:bdf8bd3b7f1961eba158060680908bfc0bf77cba9773a47ce1f39a89be41a43b_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:dceaebb7604ee432f44939632f88d72d52abb3f2bfc4e175c8adcfdb5aca928d_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:22c0c70b69645c5e6a5630b6623aa857afbe753d4ea5151e86fd2ec88d67f886_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3c7531d2afacc243b442795102d961f9ec111d33409a09a31b7e9bed0a75d52f_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:41a088ac743ca90308ba0738471fab5b7ba12c0d5a88c88aed12f19c5cf9ae3b_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b4dba38a06b90ec9a88ba2541429cd19d2a03588944045a5c0c4c33988329d07_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:6346b47545f668a23f2f02141291bcb30650a2fad1a56d97aae8b20baf986682_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c19d40c8de026714cd9a19bc5de7ea022e3ae9955b7b4299e9cbde69e92b780_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ad7e9c1a2236ba34da8f5349f1fa7b35fcea8981d9257af8fca0a1ecc4d5a61d_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:df9ff018f6bd33041f426329cac6e14e4468282df52ee475b755d5d8710f56cd_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ce79b72cbf2efe3cc2fba42204727c131bcaa1960758d4b32aeb4caf70a0748_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2e1c9dfc53b85cfeb82e45d02096372250d6ea6c83cb31088a0fd9a451c6d392_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:68f36aa5c5366024fa29e5b9a4915acc4139208b9113a574384dd8140f7ae1a2_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:6a9b939d4d13a9a74e5083cb7684d50742020f1961720a346456e7431e592bf3_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:1521447f3d76f4ba1e4cb92bd166285c5c8c19eb2976334817e0118ea163ee3e_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:5bd59b8e52e5af5a6c5946c383eaa762bbfa7b144b7b888172f14d10b5ad573f_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8aa0747c0ec6ba40947f6dd1464d56c5bfbc15225367cfb1ffc0a6fe65481c30_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:ade9141784f5c838a9c0125198ba84878f319827f38ddde98906754e316bae76_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0a0bc45b8a6a284a762fb9f9a3b2a9025e62fcd3e9e0ac69a539089c474f25c2_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:83f554f65cc051c21f4a6779afac27abc4410b4aaa150a63b992dca529318d0d_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e5df66a9050e8856d2bc4eed3ca3b92895b7842b06d6dd1c93e32f999ccad1de_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e89f1932aaabd42c5b7be791305a427f1fb811719296c1bddfac49edd771fa47_arm64	—	Vendor Fix fix

Known not affected 72 products

Product	Identifier	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:17b907f3bc67fe68c91f72a5fac1a2320ef0ceb642a7ff7359781ef627f660c2_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1c7f83bf0ff1d3231bc3d2c8559708671e58229e4ddcbd1db8607559d0564fed_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:67fe0a996cbb7af417edf2b4b7b7cac1c1d638e0cfe8d0e684c8d4314814de49_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:864cfbceb2af949ad1f7d0db61bb0a93346db74188314c3fe03892a2daf156ad_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:019c1264ffad487a41578bf33209d997303a491194491d0d4332b15602086ac7_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4ef3304a33a387668f0b5fa1b6998e64062cd61e19aa3b49b444400d4ba5b229_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:b8606468aabd58cc015ee48aadbe7d69bf2ceedf25466c201303fdeb01aeedb0_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:e45ef752eeafd85f33f0b87e955055b701522a99c01b5b1662997015cda0e236_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:07502045ec816b13a5aab5f5bcdf8c50242a2b8acbd15e3fa2dbb2faa25d2ed3_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:104cfeb03d0b29b7e76516aa3ac8072366efeef5c136b68f7c3e8e0ad5ce1b96_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e3445247fb19830ca4840fc26918d1154d53e1ae735d139473fe470db09a3efe_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:fa831832da15a85b49d52812220f3e6de82793461016cc659577113c0a5a0a4c_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22d2a996d18d00f5985f381e395b33186c2af759fba010bec0cc9f3120be3d3a_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:51b926dc40fa8abe32f1a31f419d6e38d2ac322dc5973650bf0326afd841edd7_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c86653f45ed8c480589f2d3cde84e1de45e23dbdeb7dcc398d5f0121ebc9215f_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:dbe55cb7c87224ae10d5b157ef5e66a4ffe4788bfb134a3db47d2c1bceab4eec_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:0815b6568f3c2df6d86aa70458a3037d0251f58a673244f13defcfa9053d4019_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:2fc1ac0ac7950482cc4ee05aea133af511ebfcfbe45e0fa3d13f33c983a1a75a_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:48d38b946e601b8bfebe7fac00d538f01b6e565f01f76681059af7001d1a42a6_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:81b31ada806558c18afb7bfcdaf1bc74ae92245e2f42aade9d80c59be2fa9a4c_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3b69bad711b3358fa22546c193d0b7d15c96c1b0c445b36da1d426695516634d_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:72514aafb15a0988ec5d65cd01a90bd0c58010cce32af69c3d42b4d3a051a892_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:aa964bc0245cd01f2077b2f28567048ccb638cb899eefa66383dbcc2d53bcf3d_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:affbb00a938b6306fc357de5f5b5b48c1bc493a280b9db94cc0a5d545337934f_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:18c24d419df62a0eea1661c1ee045d90c0af6b9b1b026db79ecb194eb90da729_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b2d8de5fe912b7310f3101c2643ef11dbcbbf1ce9c615bd08ed6b51d33e1524c_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ce6f63545309f77de13631a75d9fa3e3060b053cb38eac4c5c673bfe2a41c772_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f4927579a55325aff443a687b205a5bc501cd76c4456eb5cb040ed7069b896e8_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:22b1c051472b80f6d31e528852f46a2655cd98ab5034c17e7410fe7ff98038e7_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4f3bef1750177e00106442a17752a974e3a811941a6ea7657bd092a9dbf87706_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:873e89fc2d9e078c19de3ee06a6a7003094666483c22c33ad8f6c6523748af47_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:e5ffecfc7ded3de6e1d75de519cf97d4cf15ee28381898c3316eb2cc7fc05f5f_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:506d28cb18be265378d3fa9732fe363e680f73605c1e5089a47f831bfb70bc3d_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7edb2ca12ef15a090ed4169cb8618bc131a02f20a7b3e2e665fd4a8a862eec95_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b86b487802600bd2dc1bb49d0ebb90066658ed423e1c2eabb4fd85a9afac0e06_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c988e9854b206ec43fdce4fa6c3d3787cb438cecf936b3c2c7f78034227da6a2_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0250bc715e7a879518e5933678bdfe7a9ea79524fb54bbc21468bb38b87910c6_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4e802bcd67c6d552fd4303103c098f8cd63b118d5aaf5fe518132bf7d16c210e_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d75706da01899800ac1f1f3b2b9e2eea4d2635e9d0cf9a53a68a547e1d3e0ac3_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ef8495916e6317b146a3ddd007c29885eaafeabbb2bda08f56f1d11d1b459be1_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:1508137ce628d456a5a50d966b399ce7a7aa5500af3a7cb4f077d9d65da59af1_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:2315962c0f8025b8edcc8e8a2a9ea48a44db9066a1fc49fcf822a9a72939c5a8_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:8e3dcc4a2f74a42942771078262499c65862021fa030114837f84501d5a9e452_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:a3cc1a59f847dd52355713b2dff429d435e387841a942544069e00677216e727_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5c3f5d6f40bbf49f396cfb37bc7db44663e6d57d84d6aaf76d4beaf4c9dde652_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a50666e44e11d4babf1b2a4bc223a46dafea5f6e38d366bb36c8fff1a985638_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:bc76118c296d9864dbd13d0759e3dd564ea969c55e5c7bd0ff48531b0665b204_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:ccd7fca68979a061243fec3b4a0d477ebd6b01e31d6b50b9ca775f8a33516978_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1296546277a1a00386e6bd0364e8e65f54d2a57b4aa2c18cebf5b46d5ebd8943_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:202cbd3a192f28455f31469167219ca8a9a22500c81078c4479c2eb8db974dd0_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:46fa2c55e2535677a4778cc17703a6b13e3db1fcae3a91ad84cf1a2399d00618_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:8478f7c09aa3c63c576c3ae182bd4c8cd76f61ca992a02c3e995f0728f1125f2_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5fd6897e6417b9959ebdface7eef63b2d10893bd03a25ce8663779452891b643_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c300783c024c2b2b89f564e89226537af752e97b6d8851a22f925652f3af741c_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ce39757e08deeec88137165e0d9551f8ee2cd96b6e15db30df285cd117f0cc31_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:eb6b1ba6f319dc115fe3b669f4d1dd1aa886c967a8b0607acdb62e5b3cbb6c61_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14a1242a70933349653b197f67ed82ad44e6f15e538da82323c54e40475e105d_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2c1f2ed482705bb63b0735a48c793c0c05c2cf7b8ef4f880fc94f5163dd10ce6_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4a6ef79ffa40e508257f84a88784b5facb0f3c08f029821b214a3547ed4fc01e_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5a866383d9f4977b85ce3a46e4c3d05f6ad3bc3f46a3a3749ac3dda69c99fe0e_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4f021c6ac93ab2867ecbf05920aa61ef498d00322dda77c93bd253b4b4804e8e_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:6f99f95216c88a38b67b198f5e5dbb55275aac334bbd56ca9126de9bf93f2471_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:7ac4b491c48650651e774b0c4231d76c1815cee8dfe890960cb377705ad58118_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:a0a26d867f76d94a860711c0fc51eb9267cc4086bc696bc1367b941adc934398_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:09caff77bc08c100f903b69998dd30347d79f0a0aed7ac245e3194838ecd4752_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:56333a348a639bebf9d6d2b1f4524bd274aa696ec73763deb668226e9e12d8e2_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:6ae2fd22e8ca81684ffa10a3f549dd29c823661970b8bbd84a40f7255f58c979_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:78f90c81ddad11660c58c1fab0c5003cdbc22bd76bfb8dd0b5ff5bff1e01745e_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:287b38d7b3aa46678586893d851d97678a658d4f39296c1f3e1affeacab3853b_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:37e1500f9cc565c8f4535ac03ad3e90ce9e294b774ef41f424d6cea9d10ec2f0_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:6d60190c43b31caa8ca02f1f72ea9a8d9a3698cd3e0da4275eeb3366b11c1db0_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:8c0fb8a431c0bf8b237c9485f91fe03e15eae120233bae363dbfb8239631a7ea_amd64		—

Threats

Impact Moderate

CVE-2025-22866

A flaw was found in the Golang crypto/internal/nistec package. Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Considering how this function is used, this leakage is likely insufficient to recover the private key when P-256 is used in any well-known protocols.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 48 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:120becd4f1b2a36f48a43d2933b7a1be1595cc2cb626d44a053033d010e6aac7_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:610df72fa91b7ff983c5698c08462a2c77ec60d2940e8c0048054d14fd0a3e31_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:675af2b54df773d590a2543225c7c5cce1e9a6b0f3651a8e454c02dde506a580_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b69db5c2aac4decf99a4c97c09e9c7055b642c4849f7e78d74f78877702428e8_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:4f7f8515509882b36a95c109fb5372de195bf28924d5bce0ddfe025f71d597b3_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:94b883cd401a08efc1cffcdb0d72637066662dbbb87ea333fec50e04398df716_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d7a5a53e94a0c5f871c01081b472d2973b7740a05b15dae7cafaeef793790a7a_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f920481f708996edbc4ddc82bda2ea6c184a6adca21bd3d258ce0a5034318b56_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:1df9a040f6eaacaca9dfdabed3de15fc7a10bcb0d7cdb12fb64db008a3a87d55_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:57466b1054122ae9d616104cd3c41f8d3c1a3c510e7cc2578923ee3daaa8060c_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:598bbc8b366f87d23ff4e62a2144adb90b6ef302b4e7efe7651b3a2a7bfa5858_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:de654aef03a61d18db6b5806d0397a2ea913f001341c0f71d0048bbded160990_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5cfefcf34e2b6aaa3007aa6e23833ec6bf807fcc917068fb20dd2d24ad928ebc_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8dba2033ba3161d00121961cdb86a5d4d96c05a873b9ccb6b1492a0e6e3d63b4_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:acd380102a9470c92bf5579445548ec59f506a8357638e528ebde1486d7d2f7a_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ed3dda6f99cb789b2fcd00768a8992fdaefd66eedc13091b4ec71636ae45180f_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:093fdac33650bc2d1d136024d0082ca6d527319c49372e7dcc62a01048ad8265_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2d21aab8de8ba00af7049f5cc1150f341c20b9c4f4607a9ce12bf898791318ef_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a74a7e175474586c81ecd58e9858b5ce68930b2926ae164dc94bdc42746edf5f_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:b2c522e77061272aec9209b53474f1522239b114c62033600491fe5c7343207b_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4de85fb645c49673a188cf16d9c5f60f6c22165f2c17d9d9575a261156895628_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e5daf53e758944f1bd73189320af6df8c73a1288990dbd9fab71617b417eec4_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:7e9cea4d99b8199f55c3568e7df4735e809434da82015a554ec30c31a21eda49_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:b2c33fa73936ff22062bfe1b223f4ec9cfd9262b583e2909f1b893fa886a91f3_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:43c08b788b7685a00b7a3c2b42b9d84e321ae1a007eb283a67d89c64332728ad_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:854b5ffea55e0fba6c4670a3c7b4a5294109cdad00f4eec01c7324748abec404_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:bdf8bd3b7f1961eba158060680908bfc0bf77cba9773a47ce1f39a89be41a43b_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:dceaebb7604ee432f44939632f88d72d52abb3f2bfc4e175c8adcfdb5aca928d_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:22c0c70b69645c5e6a5630b6623aa857afbe753d4ea5151e86fd2ec88d67f886_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3c7531d2afacc243b442795102d961f9ec111d33409a09a31b7e9bed0a75d52f_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:41a088ac743ca90308ba0738471fab5b7ba12c0d5a88c88aed12f19c5cf9ae3b_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b4dba38a06b90ec9a88ba2541429cd19d2a03588944045a5c0c4c33988329d07_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:6346b47545f668a23f2f02141291bcb30650a2fad1a56d97aae8b20baf986682_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c19d40c8de026714cd9a19bc5de7ea022e3ae9955b7b4299e9cbde69e92b780_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ad7e9c1a2236ba34da8f5349f1fa7b35fcea8981d9257af8fca0a1ecc4d5a61d_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:df9ff018f6bd33041f426329cac6e14e4468282df52ee475b755d5d8710f56cd_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ce79b72cbf2efe3cc2fba42204727c131bcaa1960758d4b32aeb4caf70a0748_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2e1c9dfc53b85cfeb82e45d02096372250d6ea6c83cb31088a0fd9a451c6d392_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:68f36aa5c5366024fa29e5b9a4915acc4139208b9113a574384dd8140f7ae1a2_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:6a9b939d4d13a9a74e5083cb7684d50742020f1961720a346456e7431e592bf3_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:1521447f3d76f4ba1e4cb92bd166285c5c8c19eb2976334817e0118ea163ee3e_arm64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:5bd59b8e52e5af5a6c5946c383eaa762bbfa7b144b7b888172f14d10b5ad573f_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8aa0747c0ec6ba40947f6dd1464d56c5bfbc15225367cfb1ffc0a6fe65481c30_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:ade9141784f5c838a9c0125198ba84878f319827f38ddde98906754e316bae76_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0a0bc45b8a6a284a762fb9f9a3b2a9025e62fcd3e9e0ac69a539089c474f25c2_s390x	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:83f554f65cc051c21f4a6779afac27abc4410b4aaa150a63b992dca529318d0d_amd64	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e5df66a9050e8856d2bc4eed3ca3b92895b7842b06d6dd1c93e32f999ccad1de_ppc64le	—	Vendor Fix fix
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e89f1932aaabd42c5b7be791305a427f1fb811719296c1bddfac49edd771fa47_arm64	—	Vendor Fix fix

Known not affected 76 products

Product	Identifier	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:17b907f3bc67fe68c91f72a5fac1a2320ef0ceb642a7ff7359781ef627f660c2_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1c7f83bf0ff1d3231bc3d2c8559708671e58229e4ddcbd1db8607559d0564fed_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:67fe0a996cbb7af417edf2b4b7b7cac1c1d638e0cfe8d0e684c8d4314814de49_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:864cfbceb2af949ad1f7d0db61bb0a93346db74188314c3fe03892a2daf156ad_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:019c1264ffad487a41578bf33209d997303a491194491d0d4332b15602086ac7_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4ef3304a33a387668f0b5fa1b6998e64062cd61e19aa3b49b444400d4ba5b229_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:b8606468aabd58cc015ee48aadbe7d69bf2ceedf25466c201303fdeb01aeedb0_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:e45ef752eeafd85f33f0b87e955055b701522a99c01b5b1662997015cda0e236_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:07502045ec816b13a5aab5f5bcdf8c50242a2b8acbd15e3fa2dbb2faa25d2ed3_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:104cfeb03d0b29b7e76516aa3ac8072366efeef5c136b68f7c3e8e0ad5ce1b96_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e3445247fb19830ca4840fc26918d1154d53e1ae735d139473fe470db09a3efe_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:fa831832da15a85b49d52812220f3e6de82793461016cc659577113c0a5a0a4c_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22d2a996d18d00f5985f381e395b33186c2af759fba010bec0cc9f3120be3d3a_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:51b926dc40fa8abe32f1a31f419d6e38d2ac322dc5973650bf0326afd841edd7_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c86653f45ed8c480589f2d3cde84e1de45e23dbdeb7dcc398d5f0121ebc9215f_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:dbe55cb7c87224ae10d5b157ef5e66a4ffe4788bfb134a3db47d2c1bceab4eec_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:0815b6568f3c2df6d86aa70458a3037d0251f58a673244f13defcfa9053d4019_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:2fc1ac0ac7950482cc4ee05aea133af511ebfcfbe45e0fa3d13f33c983a1a75a_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:48d38b946e601b8bfebe7fac00d538f01b6e565f01f76681059af7001d1a42a6_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:81b31ada806558c18afb7bfcdaf1bc74ae92245e2f42aade9d80c59be2fa9a4c_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3b69bad711b3358fa22546c193d0b7d15c96c1b0c445b36da1d426695516634d_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:72514aafb15a0988ec5d65cd01a90bd0c58010cce32af69c3d42b4d3a051a892_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:aa964bc0245cd01f2077b2f28567048ccb638cb899eefa66383dbcc2d53bcf3d_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:affbb00a938b6306fc357de5f5b5b48c1bc493a280b9db94cc0a5d545337934f_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:18c24d419df62a0eea1661c1ee045d90c0af6b9b1b026db79ecb194eb90da729_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b2d8de5fe912b7310f3101c2643ef11dbcbbf1ce9c615bd08ed6b51d33e1524c_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ce6f63545309f77de13631a75d9fa3e3060b053cb38eac4c5c673bfe2a41c772_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f4927579a55325aff443a687b205a5bc501cd76c4456eb5cb040ed7069b896e8_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:22b1c051472b80f6d31e528852f46a2655cd98ab5034c17e7410fe7ff98038e7_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4f3bef1750177e00106442a17752a974e3a811941a6ea7657bd092a9dbf87706_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:873e89fc2d9e078c19de3ee06a6a7003094666483c22c33ad8f6c6523748af47_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:e5ffecfc7ded3de6e1d75de519cf97d4cf15ee28381898c3316eb2cc7fc05f5f_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:506d28cb18be265378d3fa9732fe363e680f73605c1e5089a47f831bfb70bc3d_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7edb2ca12ef15a090ed4169cb8618bc131a02f20a7b3e2e665fd4a8a862eec95_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b86b487802600bd2dc1bb49d0ebb90066658ed423e1c2eabb4fd85a9afac0e06_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c988e9854b206ec43fdce4fa6c3d3787cb438cecf936b3c2c7f78034227da6a2_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0250bc715e7a879518e5933678bdfe7a9ea79524fb54bbc21468bb38b87910c6_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4e802bcd67c6d552fd4303103c098f8cd63b118d5aaf5fe518132bf7d16c210e_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d75706da01899800ac1f1f3b2b9e2eea4d2635e9d0cf9a53a68a547e1d3e0ac3_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ef8495916e6317b146a3ddd007c29885eaafeabbb2bda08f56f1d11d1b459be1_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:1508137ce628d456a5a50d966b399ce7a7aa5500af3a7cb4f077d9d65da59af1_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:2315962c0f8025b8edcc8e8a2a9ea48a44db9066a1fc49fcf822a9a72939c5a8_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:8e3dcc4a2f74a42942771078262499c65862021fa030114837f84501d5a9e452_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:a3cc1a59f847dd52355713b2dff429d435e387841a942544069e00677216e727_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5c3f5d6f40bbf49f396cfb37bc7db44663e6d57d84d6aaf76d4beaf4c9dde652_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a50666e44e11d4babf1b2a4bc223a46dafea5f6e38d366bb36c8fff1a985638_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:bc76118c296d9864dbd13d0759e3dd564ea969c55e5c7bd0ff48531b0665b204_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:ccd7fca68979a061243fec3b4a0d477ebd6b01e31d6b50b9ca775f8a33516978_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1296546277a1a00386e6bd0364e8e65f54d2a57b4aa2c18cebf5b46d5ebd8943_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:202cbd3a192f28455f31469167219ca8a9a22500c81078c4479c2eb8db974dd0_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:46fa2c55e2535677a4778cc17703a6b13e3db1fcae3a91ad84cf1a2399d00618_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:8478f7c09aa3c63c576c3ae182bd4c8cd76f61ca992a02c3e995f0728f1125f2_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5fd6897e6417b9959ebdface7eef63b2d10893bd03a25ce8663779452891b643_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c300783c024c2b2b89f564e89226537af752e97b6d8851a22f925652f3af741c_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ce39757e08deeec88137165e0d9551f8ee2cd96b6e15db30df285cd117f0cc31_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:eb6b1ba6f319dc115fe3b669f4d1dd1aa886c967a8b0607acdb62e5b3cbb6c61_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14a1242a70933349653b197f67ed82ad44e6f15e538da82323c54e40475e105d_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2c1f2ed482705bb63b0735a48c793c0c05c2cf7b8ef4f880fc94f5163dd10ce6_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4a6ef79ffa40e508257f84a88784b5facb0f3c08f029821b214a3547ed4fc01e_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5a866383d9f4977b85ce3a46e4c3d05f6ad3bc3f46a3a3749ac3dda69c99fe0e_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:8e727ff6fc10dca05724d0ef32facd52c714e41d32cbbdee66dd9a119d48a63c_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b67bc5198e5e716839d323b4f198d69a1f05fb6686200ec81fc3790c2f4040c3_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b80db1eec52e300101e990f786491111660a6abc08247646b76d3e7814d5d39e_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d4d40fb6beaf5e3bc9c9a5e0e50432c64d7fbcb01a2be3ce04a263d14ee28ccd_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4f021c6ac93ab2867ecbf05920aa61ef498d00322dda77c93bd253b4b4804e8e_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:6f99f95216c88a38b67b198f5e5dbb55275aac334bbd56ca9126de9bf93f2471_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:7ac4b491c48650651e774b0c4231d76c1815cee8dfe890960cb377705ad58118_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:a0a26d867f76d94a860711c0fc51eb9267cc4086bc696bc1367b941adc934398_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:09caff77bc08c100f903b69998dd30347d79f0a0aed7ac245e3194838ecd4752_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:56333a348a639bebf9d6d2b1f4524bd274aa696ec73763deb668226e9e12d8e2_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:6ae2fd22e8ca81684ffa10a3f549dd29c823661970b8bbd84a40f7255f58c979_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:78f90c81ddad11660c58c1fab0c5003cdbc22bd76bfb8dd0b5ff5bff1e01745e_amd64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:287b38d7b3aa46678586893d851d97678a658d4f39296c1f3e1affeacab3853b_s390x		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:37e1500f9cc565c8f4535ac03ad3e90ce9e294b774ef41f424d6cea9d10ec2f0_ppc64le		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:6d60190c43b31caa8ca02f1f72ea9a8d9a3698cd3e0da4275eeb3366b11c1db0_arm64		—
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:8c0fb8a431c0bf8b237c9485f91fe03e15eae120233bae363dbfb8239631a7ea_amd64		—

Threats

Impact Moderate

CVE-2026-10059

A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this vulnerability by creating a namespaced ClusterCurator. This action inadvertently grants the tenant administrator the ability to mint a token for a ServiceAccount with cluster-wide administrative authority. This leads to a privilege escalation, allowing the tenant administrator to gain full control over the cluster.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-266 - Incorrect Privilege Assignment

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:18c24d419df62a0eea1661c1ee045d90c0af6b9b1b026db79ecb194eb90da729_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b2d8de5fe912b7310f3101c2643ef11dbcbbf1ce9c615bd08ed6b51d33e1524c_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ce6f63545309f77de13631a75d9fa3e3060b053cb38eac4c5c673bfe2a41c772_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f4927579a55325aff443a687b205a5bc501cd76c4456eb5cb040ed7069b896e8_s390x	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:120becd4f1b2a36f48a43d2933b7a1be1595cc2cb626d44a053033d010e6aac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:610df72fa91b7ff983c5698c08462a2c77ec60d2940e8c0048054d14fd0a3e31_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:675af2b54df773d590a2543225c7c5cce1e9a6b0f3651a8e454c02dde506a580_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b69db5c2aac4decf99a4c97c09e9c7055b642c4849f7e78d74f78877702428e8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:17b907f3bc67fe68c91f72a5fac1a2320ef0ceb642a7ff7359781ef627f660c2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1c7f83bf0ff1d3231bc3d2c8559708671e58229e4ddcbd1db8607559d0564fed_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:67fe0a996cbb7af417edf2b4b7b7cac1c1d638e0cfe8d0e684c8d4314814de49_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:864cfbceb2af949ad1f7d0db61bb0a93346db74188314c3fe03892a2daf156ad_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:019c1264ffad487a41578bf33209d997303a491194491d0d4332b15602086ac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4ef3304a33a387668f0b5fa1b6998e64062cd61e19aa3b49b444400d4ba5b229_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:b8606468aabd58cc015ee48aadbe7d69bf2ceedf25466c201303fdeb01aeedb0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:e45ef752eeafd85f33f0b87e955055b701522a99c01b5b1662997015cda0e236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:07502045ec816b13a5aab5f5bcdf8c50242a2b8acbd15e3fa2dbb2faa25d2ed3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:104cfeb03d0b29b7e76516aa3ac8072366efeef5c136b68f7c3e8e0ad5ce1b96_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e3445247fb19830ca4840fc26918d1154d53e1ae735d139473fe470db09a3efe_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:fa831832da15a85b49d52812220f3e6de82793461016cc659577113c0a5a0a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22d2a996d18d00f5985f381e395b33186c2af759fba010bec0cc9f3120be3d3a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:51b926dc40fa8abe32f1a31f419d6e38d2ac322dc5973650bf0326afd841edd7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c86653f45ed8c480589f2d3cde84e1de45e23dbdeb7dcc398d5f0121ebc9215f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:dbe55cb7c87224ae10d5b157ef5e66a4ffe4788bfb134a3db47d2c1bceab4eec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:0815b6568f3c2df6d86aa70458a3037d0251f58a673244f13defcfa9053d4019_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:2fc1ac0ac7950482cc4ee05aea133af511ebfcfbe45e0fa3d13f33c983a1a75a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:48d38b946e601b8bfebe7fac00d538f01b6e565f01f76681059af7001d1a42a6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:81b31ada806558c18afb7bfcdaf1bc74ae92245e2f42aade9d80c59be2fa9a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3b69bad711b3358fa22546c193d0b7d15c96c1b0c445b36da1d426695516634d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:72514aafb15a0988ec5d65cd01a90bd0c58010cce32af69c3d42b4d3a051a892_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:aa964bc0245cd01f2077b2f28567048ccb638cb899eefa66383dbcc2d53bcf3d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:affbb00a938b6306fc357de5f5b5b48c1bc493a280b9db94cc0a5d545337934f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:22b1c051472b80f6d31e528852f46a2655cd98ab5034c17e7410fe7ff98038e7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4f3bef1750177e00106442a17752a974e3a811941a6ea7657bd092a9dbf87706_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:873e89fc2d9e078c19de3ee06a6a7003094666483c22c33ad8f6c6523748af47_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:e5ffecfc7ded3de6e1d75de519cf97d4cf15ee28381898c3316eb2cc7fc05f5f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:4f7f8515509882b36a95c109fb5372de195bf28924d5bce0ddfe025f71d597b3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:94b883cd401a08efc1cffcdb0d72637066662dbbb87ea333fec50e04398df716_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d7a5a53e94a0c5f871c01081b472d2973b7740a05b15dae7cafaeef793790a7a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f920481f708996edbc4ddc82bda2ea6c184a6adca21bd3d258ce0a5034318b56_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:1df9a040f6eaacaca9dfdabed3de15fc7a10bcb0d7cdb12fb64db008a3a87d55_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:57466b1054122ae9d616104cd3c41f8d3c1a3c510e7cc2578923ee3daaa8060c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:598bbc8b366f87d23ff4e62a2144adb90b6ef302b4e7efe7651b3a2a7bfa5858_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:de654aef03a61d18db6b5806d0397a2ea913f001341c0f71d0048bbded160990_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:506d28cb18be265378d3fa9732fe363e680f73605c1e5089a47f831bfb70bc3d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7edb2ca12ef15a090ed4169cb8618bc131a02f20a7b3e2e665fd4a8a862eec95_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b86b487802600bd2dc1bb49d0ebb90066658ed423e1c2eabb4fd85a9afac0e06_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c988e9854b206ec43fdce4fa6c3d3787cb438cecf936b3c2c7f78034227da6a2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5cfefcf34e2b6aaa3007aa6e23833ec6bf807fcc917068fb20dd2d24ad928ebc_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8dba2033ba3161d00121961cdb86a5d4d96c05a873b9ccb6b1492a0e6e3d63b4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:acd380102a9470c92bf5579445548ec59f506a8357638e528ebde1486d7d2f7a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ed3dda6f99cb789b2fcd00768a8992fdaefd66eedc13091b4ec71636ae45180f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0250bc715e7a879518e5933678bdfe7a9ea79524fb54bbc21468bb38b87910c6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4e802bcd67c6d552fd4303103c098f8cd63b118d5aaf5fe518132bf7d16c210e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d75706da01899800ac1f1f3b2b9e2eea4d2635e9d0cf9a53a68a547e1d3e0ac3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ef8495916e6317b146a3ddd007c29885eaafeabbb2bda08f56f1d11d1b459be1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:1508137ce628d456a5a50d966b399ce7a7aa5500af3a7cb4f077d9d65da59af1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:2315962c0f8025b8edcc8e8a2a9ea48a44db9066a1fc49fcf822a9a72939c5a8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:8e3dcc4a2f74a42942771078262499c65862021fa030114837f84501d5a9e452_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:a3cc1a59f847dd52355713b2dff429d435e387841a942544069e00677216e727_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5c3f5d6f40bbf49f396cfb37bc7db44663e6d57d84d6aaf76d4beaf4c9dde652_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a50666e44e11d4babf1b2a4bc223a46dafea5f6e38d366bb36c8fff1a985638_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:bc76118c296d9864dbd13d0759e3dd564ea969c55e5c7bd0ff48531b0665b204_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:ccd7fca68979a061243fec3b4a0d477ebd6b01e31d6b50b9ca775f8a33516978_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:093fdac33650bc2d1d136024d0082ca6d527319c49372e7dcc62a01048ad8265_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2d21aab8de8ba00af7049f5cc1150f341c20b9c4f4607a9ce12bf898791318ef_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a74a7e175474586c81ecd58e9858b5ce68930b2926ae164dc94bdc42746edf5f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:b2c522e77061272aec9209b53474f1522239b114c62033600491fe5c7343207b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1296546277a1a00386e6bd0364e8e65f54d2a57b4aa2c18cebf5b46d5ebd8943_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:202cbd3a192f28455f31469167219ca8a9a22500c81078c4479c2eb8db974dd0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:46fa2c55e2535677a4778cc17703a6b13e3db1fcae3a91ad84cf1a2399d00618_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:8478f7c09aa3c63c576c3ae182bd4c8cd76f61ca992a02c3e995f0728f1125f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5fd6897e6417b9959ebdface7eef63b2d10893bd03a25ce8663779452891b643_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c300783c024c2b2b89f564e89226537af752e97b6d8851a22f925652f3af741c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ce39757e08deeec88137165e0d9551f8ee2cd96b6e15db30df285cd117f0cc31_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:eb6b1ba6f319dc115fe3b669f4d1dd1aa886c967a8b0607acdb62e5b3cbb6c61_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14a1242a70933349653b197f67ed82ad44e6f15e538da82323c54e40475e105d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2c1f2ed482705bb63b0735a48c793c0c05c2cf7b8ef4f880fc94f5163dd10ce6_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4a6ef79ffa40e508257f84a88784b5facb0f3c08f029821b214a3547ed4fc01e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5a866383d9f4977b85ce3a46e4c3d05f6ad3bc3f46a3a3749ac3dda69c99fe0e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:8e727ff6fc10dca05724d0ef32facd52c714e41d32cbbdee66dd9a119d48a63c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b67bc5198e5e716839d323b4f198d69a1f05fb6686200ec81fc3790c2f4040c3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b80db1eec52e300101e990f786491111660a6abc08247646b76d3e7814d5d39e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d4d40fb6beaf5e3bc9c9a5e0e50432c64d7fbcb01a2be3ce04a263d14ee28ccd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4de85fb645c49673a188cf16d9c5f60f6c22165f2c17d9d9575a261156895628_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e5daf53e758944f1bd73189320af6df8c73a1288990dbd9fab71617b417eec4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:7e9cea4d99b8199f55c3568e7df4735e809434da82015a554ec30c31a21eda49_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:b2c33fa73936ff22062bfe1b223f4ec9cfd9262b583e2909f1b893fa886a91f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:43c08b788b7685a00b7a3c2b42b9d84e321ae1a007eb283a67d89c64332728ad_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:854b5ffea55e0fba6c4670a3c7b4a5294109cdad00f4eec01c7324748abec404_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:bdf8bd3b7f1961eba158060680908bfc0bf77cba9773a47ce1f39a89be41a43b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:dceaebb7604ee432f44939632f88d72d52abb3f2bfc4e175c8adcfdb5aca928d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4f021c6ac93ab2867ecbf05920aa61ef498d00322dda77c93bd253b4b4804e8e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:6f99f95216c88a38b67b198f5e5dbb55275aac334bbd56ca9126de9bf93f2471_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:7ac4b491c48650651e774b0c4231d76c1815cee8dfe890960cb377705ad58118_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:a0a26d867f76d94a860711c0fc51eb9267cc4086bc696bc1367b941adc934398_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:22c0c70b69645c5e6a5630b6623aa857afbe753d4ea5151e86fd2ec88d67f886_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3c7531d2afacc243b442795102d961f9ec111d33409a09a31b7e9bed0a75d52f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:41a088ac743ca90308ba0738471fab5b7ba12c0d5a88c88aed12f19c5cf9ae3b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b4dba38a06b90ec9a88ba2541429cd19d2a03588944045a5c0c4c33988329d07_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:09caff77bc08c100f903b69998dd30347d79f0a0aed7ac245e3194838ecd4752_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:56333a348a639bebf9d6d2b1f4524bd274aa696ec73763deb668226e9e12d8e2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:6ae2fd22e8ca81684ffa10a3f549dd29c823661970b8bbd84a40f7255f58c979_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:78f90c81ddad11660c58c1fab0c5003cdbc22bd76bfb8dd0b5ff5bff1e01745e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:6346b47545f668a23f2f02141291bcb30650a2fad1a56d97aae8b20baf986682_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c19d40c8de026714cd9a19bc5de7ea022e3ae9955b7b4299e9cbde69e92b780_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ad7e9c1a2236ba34da8f5349f1fa7b35fcea8981d9257af8fca0a1ecc4d5a61d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:df9ff018f6bd33041f426329cac6e14e4468282df52ee475b755d5d8710f56cd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:287b38d7b3aa46678586893d851d97678a658d4f39296c1f3e1affeacab3853b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:37e1500f9cc565c8f4535ac03ad3e90ce9e294b774ef41f424d6cea9d10ec2f0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:6d60190c43b31caa8ca02f1f72ea9a8d9a3698cd3e0da4275eeb3366b11c1db0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:8c0fb8a431c0bf8b237c9485f91fe03e15eae120233bae363dbfb8239631a7ea_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ce79b72cbf2efe3cc2fba42204727c131bcaa1960758d4b32aeb4caf70a0748_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2e1c9dfc53b85cfeb82e45d02096372250d6ea6c83cb31088a0fd9a451c6d392_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:68f36aa5c5366024fa29e5b9a4915acc4139208b9113a574384dd8140f7ae1a2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:6a9b939d4d13a9a74e5083cb7684d50742020f1961720a346456e7431e592bf3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:1521447f3d76f4ba1e4cb92bd166285c5c8c19eb2976334817e0118ea163ee3e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:5bd59b8e52e5af5a6c5946c383eaa762bbfa7b144b7b888172f14d10b5ad573f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8aa0747c0ec6ba40947f6dd1464d56c5bfbc15225367cfb1ffc0a6fe65481c30_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:ade9141784f5c838a9c0125198ba84878f319827f38ddde98906754e316bae76_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0a0bc45b8a6a284a762fb9f9a3b2a9025e62fcd3e9e0ac69a539089c474f25c2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:83f554f65cc051c21f4a6779afac27abc4410b4aaa150a63b992dca529318d0d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e5df66a9050e8856d2bc4eed3ca3b92895b7842b06d6dd1c93e32f999ccad1de_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e89f1932aaabd42c5b7be791305a427f1fb811719296c1bddfac49edd771fa47_arm64	—	Workaround

Threats

Impact Important

CVE-2026-12143

A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0250bc715e7a879518e5933678bdfe7a9ea79524fb54bbc21468bb38b87910c6_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4e802bcd67c6d552fd4303103c098f8cd63b118d5aaf5fe518132bf7d16c210e_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d75706da01899800ac1f1f3b2b9e2eea4d2635e9d0cf9a53a68a547e1d3e0ac3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ef8495916e6317b146a3ddd007c29885eaafeabbb2bda08f56f1d11d1b459be1_s390x	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:120becd4f1b2a36f48a43d2933b7a1be1595cc2cb626d44a053033d010e6aac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:610df72fa91b7ff983c5698c08462a2c77ec60d2940e8c0048054d14fd0a3e31_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:675af2b54df773d590a2543225c7c5cce1e9a6b0f3651a8e454c02dde506a580_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b69db5c2aac4decf99a4c97c09e9c7055b642c4849f7e78d74f78877702428e8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:17b907f3bc67fe68c91f72a5fac1a2320ef0ceb642a7ff7359781ef627f660c2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1c7f83bf0ff1d3231bc3d2c8559708671e58229e4ddcbd1db8607559d0564fed_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:67fe0a996cbb7af417edf2b4b7b7cac1c1d638e0cfe8d0e684c8d4314814de49_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:864cfbceb2af949ad1f7d0db61bb0a93346db74188314c3fe03892a2daf156ad_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:019c1264ffad487a41578bf33209d997303a491194491d0d4332b15602086ac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4ef3304a33a387668f0b5fa1b6998e64062cd61e19aa3b49b444400d4ba5b229_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:b8606468aabd58cc015ee48aadbe7d69bf2ceedf25466c201303fdeb01aeedb0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:e45ef752eeafd85f33f0b87e955055b701522a99c01b5b1662997015cda0e236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:07502045ec816b13a5aab5f5bcdf8c50242a2b8acbd15e3fa2dbb2faa25d2ed3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:104cfeb03d0b29b7e76516aa3ac8072366efeef5c136b68f7c3e8e0ad5ce1b96_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e3445247fb19830ca4840fc26918d1154d53e1ae735d139473fe470db09a3efe_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:fa831832da15a85b49d52812220f3e6de82793461016cc659577113c0a5a0a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22d2a996d18d00f5985f381e395b33186c2af759fba010bec0cc9f3120be3d3a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:51b926dc40fa8abe32f1a31f419d6e38d2ac322dc5973650bf0326afd841edd7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c86653f45ed8c480589f2d3cde84e1de45e23dbdeb7dcc398d5f0121ebc9215f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:dbe55cb7c87224ae10d5b157ef5e66a4ffe4788bfb134a3db47d2c1bceab4eec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:0815b6568f3c2df6d86aa70458a3037d0251f58a673244f13defcfa9053d4019_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:2fc1ac0ac7950482cc4ee05aea133af511ebfcfbe45e0fa3d13f33c983a1a75a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:48d38b946e601b8bfebe7fac00d538f01b6e565f01f76681059af7001d1a42a6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:81b31ada806558c18afb7bfcdaf1bc74ae92245e2f42aade9d80c59be2fa9a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3b69bad711b3358fa22546c193d0b7d15c96c1b0c445b36da1d426695516634d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:72514aafb15a0988ec5d65cd01a90bd0c58010cce32af69c3d42b4d3a051a892_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:aa964bc0245cd01f2077b2f28567048ccb638cb899eefa66383dbcc2d53bcf3d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:affbb00a938b6306fc357de5f5b5b48c1bc493a280b9db94cc0a5d545337934f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:18c24d419df62a0eea1661c1ee045d90c0af6b9b1b026db79ecb194eb90da729_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b2d8de5fe912b7310f3101c2643ef11dbcbbf1ce9c615bd08ed6b51d33e1524c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ce6f63545309f77de13631a75d9fa3e3060b053cb38eac4c5c673bfe2a41c772_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f4927579a55325aff443a687b205a5bc501cd76c4456eb5cb040ed7069b896e8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:22b1c051472b80f6d31e528852f46a2655cd98ab5034c17e7410fe7ff98038e7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4f3bef1750177e00106442a17752a974e3a811941a6ea7657bd092a9dbf87706_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:873e89fc2d9e078c19de3ee06a6a7003094666483c22c33ad8f6c6523748af47_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:e5ffecfc7ded3de6e1d75de519cf97d4cf15ee28381898c3316eb2cc7fc05f5f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:4f7f8515509882b36a95c109fb5372de195bf28924d5bce0ddfe025f71d597b3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:94b883cd401a08efc1cffcdb0d72637066662dbbb87ea333fec50e04398df716_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d7a5a53e94a0c5f871c01081b472d2973b7740a05b15dae7cafaeef793790a7a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f920481f708996edbc4ddc82bda2ea6c184a6adca21bd3d258ce0a5034318b56_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:1df9a040f6eaacaca9dfdabed3de15fc7a10bcb0d7cdb12fb64db008a3a87d55_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:57466b1054122ae9d616104cd3c41f8d3c1a3c510e7cc2578923ee3daaa8060c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:598bbc8b366f87d23ff4e62a2144adb90b6ef302b4e7efe7651b3a2a7bfa5858_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:de654aef03a61d18db6b5806d0397a2ea913f001341c0f71d0048bbded160990_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:506d28cb18be265378d3fa9732fe363e680f73605c1e5089a47f831bfb70bc3d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7edb2ca12ef15a090ed4169cb8618bc131a02f20a7b3e2e665fd4a8a862eec95_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b86b487802600bd2dc1bb49d0ebb90066658ed423e1c2eabb4fd85a9afac0e06_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c988e9854b206ec43fdce4fa6c3d3787cb438cecf936b3c2c7f78034227da6a2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5cfefcf34e2b6aaa3007aa6e23833ec6bf807fcc917068fb20dd2d24ad928ebc_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8dba2033ba3161d00121961cdb86a5d4d96c05a873b9ccb6b1492a0e6e3d63b4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:acd380102a9470c92bf5579445548ec59f506a8357638e528ebde1486d7d2f7a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ed3dda6f99cb789b2fcd00768a8992fdaefd66eedc13091b4ec71636ae45180f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:1508137ce628d456a5a50d966b399ce7a7aa5500af3a7cb4f077d9d65da59af1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:2315962c0f8025b8edcc8e8a2a9ea48a44db9066a1fc49fcf822a9a72939c5a8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:8e3dcc4a2f74a42942771078262499c65862021fa030114837f84501d5a9e452_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:a3cc1a59f847dd52355713b2dff429d435e387841a942544069e00677216e727_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5c3f5d6f40bbf49f396cfb37bc7db44663e6d57d84d6aaf76d4beaf4c9dde652_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a50666e44e11d4babf1b2a4bc223a46dafea5f6e38d366bb36c8fff1a985638_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:bc76118c296d9864dbd13d0759e3dd564ea969c55e5c7bd0ff48531b0665b204_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:ccd7fca68979a061243fec3b4a0d477ebd6b01e31d6b50b9ca775f8a33516978_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:093fdac33650bc2d1d136024d0082ca6d527319c49372e7dcc62a01048ad8265_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2d21aab8de8ba00af7049f5cc1150f341c20b9c4f4607a9ce12bf898791318ef_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a74a7e175474586c81ecd58e9858b5ce68930b2926ae164dc94bdc42746edf5f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:b2c522e77061272aec9209b53474f1522239b114c62033600491fe5c7343207b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1296546277a1a00386e6bd0364e8e65f54d2a57b4aa2c18cebf5b46d5ebd8943_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:202cbd3a192f28455f31469167219ca8a9a22500c81078c4479c2eb8db974dd0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:46fa2c55e2535677a4778cc17703a6b13e3db1fcae3a91ad84cf1a2399d00618_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:8478f7c09aa3c63c576c3ae182bd4c8cd76f61ca992a02c3e995f0728f1125f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5fd6897e6417b9959ebdface7eef63b2d10893bd03a25ce8663779452891b643_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c300783c024c2b2b89f564e89226537af752e97b6d8851a22f925652f3af741c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ce39757e08deeec88137165e0d9551f8ee2cd96b6e15db30df285cd117f0cc31_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:eb6b1ba6f319dc115fe3b669f4d1dd1aa886c967a8b0607acdb62e5b3cbb6c61_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14a1242a70933349653b197f67ed82ad44e6f15e538da82323c54e40475e105d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2c1f2ed482705bb63b0735a48c793c0c05c2cf7b8ef4f880fc94f5163dd10ce6_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4a6ef79ffa40e508257f84a88784b5facb0f3c08f029821b214a3547ed4fc01e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5a866383d9f4977b85ce3a46e4c3d05f6ad3bc3f46a3a3749ac3dda69c99fe0e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:8e727ff6fc10dca05724d0ef32facd52c714e41d32cbbdee66dd9a119d48a63c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b67bc5198e5e716839d323b4f198d69a1f05fb6686200ec81fc3790c2f4040c3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b80db1eec52e300101e990f786491111660a6abc08247646b76d3e7814d5d39e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d4d40fb6beaf5e3bc9c9a5e0e50432c64d7fbcb01a2be3ce04a263d14ee28ccd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4de85fb645c49673a188cf16d9c5f60f6c22165f2c17d9d9575a261156895628_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e5daf53e758944f1bd73189320af6df8c73a1288990dbd9fab71617b417eec4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:7e9cea4d99b8199f55c3568e7df4735e809434da82015a554ec30c31a21eda49_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:b2c33fa73936ff22062bfe1b223f4ec9cfd9262b583e2909f1b893fa886a91f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:43c08b788b7685a00b7a3c2b42b9d84e321ae1a007eb283a67d89c64332728ad_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:854b5ffea55e0fba6c4670a3c7b4a5294109cdad00f4eec01c7324748abec404_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:bdf8bd3b7f1961eba158060680908bfc0bf77cba9773a47ce1f39a89be41a43b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:dceaebb7604ee432f44939632f88d72d52abb3f2bfc4e175c8adcfdb5aca928d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4f021c6ac93ab2867ecbf05920aa61ef498d00322dda77c93bd253b4b4804e8e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:6f99f95216c88a38b67b198f5e5dbb55275aac334bbd56ca9126de9bf93f2471_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:7ac4b491c48650651e774b0c4231d76c1815cee8dfe890960cb377705ad58118_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:a0a26d867f76d94a860711c0fc51eb9267cc4086bc696bc1367b941adc934398_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:22c0c70b69645c5e6a5630b6623aa857afbe753d4ea5151e86fd2ec88d67f886_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3c7531d2afacc243b442795102d961f9ec111d33409a09a31b7e9bed0a75d52f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:41a088ac743ca90308ba0738471fab5b7ba12c0d5a88c88aed12f19c5cf9ae3b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b4dba38a06b90ec9a88ba2541429cd19d2a03588944045a5c0c4c33988329d07_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:09caff77bc08c100f903b69998dd30347d79f0a0aed7ac245e3194838ecd4752_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:56333a348a639bebf9d6d2b1f4524bd274aa696ec73763deb668226e9e12d8e2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:6ae2fd22e8ca81684ffa10a3f549dd29c823661970b8bbd84a40f7255f58c979_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:78f90c81ddad11660c58c1fab0c5003cdbc22bd76bfb8dd0b5ff5bff1e01745e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:6346b47545f668a23f2f02141291bcb30650a2fad1a56d97aae8b20baf986682_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c19d40c8de026714cd9a19bc5de7ea022e3ae9955b7b4299e9cbde69e92b780_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ad7e9c1a2236ba34da8f5349f1fa7b35fcea8981d9257af8fca0a1ecc4d5a61d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:df9ff018f6bd33041f426329cac6e14e4468282df52ee475b755d5d8710f56cd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:287b38d7b3aa46678586893d851d97678a658d4f39296c1f3e1affeacab3853b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:37e1500f9cc565c8f4535ac03ad3e90ce9e294b774ef41f424d6cea9d10ec2f0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:6d60190c43b31caa8ca02f1f72ea9a8d9a3698cd3e0da4275eeb3366b11c1db0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:8c0fb8a431c0bf8b237c9485f91fe03e15eae120233bae363dbfb8239631a7ea_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ce79b72cbf2efe3cc2fba42204727c131bcaa1960758d4b32aeb4caf70a0748_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2e1c9dfc53b85cfeb82e45d02096372250d6ea6c83cb31088a0fd9a451c6d392_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:68f36aa5c5366024fa29e5b9a4915acc4139208b9113a574384dd8140f7ae1a2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:6a9b939d4d13a9a74e5083cb7684d50742020f1961720a346456e7431e592bf3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:1521447f3d76f4ba1e4cb92bd166285c5c8c19eb2976334817e0118ea163ee3e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:5bd59b8e52e5af5a6c5946c383eaa762bbfa7b144b7b888172f14d10b5ad573f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8aa0747c0ec6ba40947f6dd1464d56c5bfbc15225367cfb1ffc0a6fe65481c30_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:ade9141784f5c838a9c0125198ba84878f319827f38ddde98906754e316bae76_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0a0bc45b8a6a284a762fb9f9a3b2a9025e62fcd3e9e0ac69a539089c474f25c2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:83f554f65cc051c21f4a6779afac27abc4410b4aaa150a63b992dca529318d0d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e5df66a9050e8856d2bc4eed3ca3b92895b7842b06d6dd1c93e32f999ccad1de_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e89f1932aaabd42c5b7be791305a427f1fb811719296c1bddfac49edd771fa47_arm64	—	Workaround

Threats

Impact Important

CVE-2026-19130

A flaw was found in the provider-credential-controller component of multicluster-engine (MCE). An attacker with specific permissions on the hub cluster, and knowledge of a prior credential value, could exploit an authorization bypass vulnerability. By manipulating `copiedFrom` labels, the attacker could intercept newly rotated provider credentials, leading to unauthorized information disclosure. This allows access to sensitive credentials that should otherwise be protected.

5.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-639 - Authorization Bypass Through User-Controlled Key

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:287b38d7b3aa46678586893d851d97678a658d4f39296c1f3e1affeacab3853b_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:37e1500f9cc565c8f4535ac03ad3e90ce9e294b774ef41f424d6cea9d10ec2f0_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:6d60190c43b31caa8ca02f1f72ea9a8d9a3698cd3e0da4275eeb3366b11c1db0_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:8c0fb8a431c0bf8b237c9485f91fe03e15eae120233bae363dbfb8239631a7ea_amd64	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:120becd4f1b2a36f48a43d2933b7a1be1595cc2cb626d44a053033d010e6aac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:610df72fa91b7ff983c5698c08462a2c77ec60d2940e8c0048054d14fd0a3e31_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:675af2b54df773d590a2543225c7c5cce1e9a6b0f3651a8e454c02dde506a580_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b69db5c2aac4decf99a4c97c09e9c7055b642c4849f7e78d74f78877702428e8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:17b907f3bc67fe68c91f72a5fac1a2320ef0ceb642a7ff7359781ef627f660c2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1c7f83bf0ff1d3231bc3d2c8559708671e58229e4ddcbd1db8607559d0564fed_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:67fe0a996cbb7af417edf2b4b7b7cac1c1d638e0cfe8d0e684c8d4314814de49_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:864cfbceb2af949ad1f7d0db61bb0a93346db74188314c3fe03892a2daf156ad_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:019c1264ffad487a41578bf33209d997303a491194491d0d4332b15602086ac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4ef3304a33a387668f0b5fa1b6998e64062cd61e19aa3b49b444400d4ba5b229_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:b8606468aabd58cc015ee48aadbe7d69bf2ceedf25466c201303fdeb01aeedb0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:e45ef752eeafd85f33f0b87e955055b701522a99c01b5b1662997015cda0e236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:07502045ec816b13a5aab5f5bcdf8c50242a2b8acbd15e3fa2dbb2faa25d2ed3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:104cfeb03d0b29b7e76516aa3ac8072366efeef5c136b68f7c3e8e0ad5ce1b96_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e3445247fb19830ca4840fc26918d1154d53e1ae735d139473fe470db09a3efe_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:fa831832da15a85b49d52812220f3e6de82793461016cc659577113c0a5a0a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22d2a996d18d00f5985f381e395b33186c2af759fba010bec0cc9f3120be3d3a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:51b926dc40fa8abe32f1a31f419d6e38d2ac322dc5973650bf0326afd841edd7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c86653f45ed8c480589f2d3cde84e1de45e23dbdeb7dcc398d5f0121ebc9215f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:dbe55cb7c87224ae10d5b157ef5e66a4ffe4788bfb134a3db47d2c1bceab4eec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:0815b6568f3c2df6d86aa70458a3037d0251f58a673244f13defcfa9053d4019_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:2fc1ac0ac7950482cc4ee05aea133af511ebfcfbe45e0fa3d13f33c983a1a75a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:48d38b946e601b8bfebe7fac00d538f01b6e565f01f76681059af7001d1a42a6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:81b31ada806558c18afb7bfcdaf1bc74ae92245e2f42aade9d80c59be2fa9a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3b69bad711b3358fa22546c193d0b7d15c96c1b0c445b36da1d426695516634d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:72514aafb15a0988ec5d65cd01a90bd0c58010cce32af69c3d42b4d3a051a892_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:aa964bc0245cd01f2077b2f28567048ccb638cb899eefa66383dbcc2d53bcf3d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:affbb00a938b6306fc357de5f5b5b48c1bc493a280b9db94cc0a5d545337934f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:18c24d419df62a0eea1661c1ee045d90c0af6b9b1b026db79ecb194eb90da729_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b2d8de5fe912b7310f3101c2643ef11dbcbbf1ce9c615bd08ed6b51d33e1524c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ce6f63545309f77de13631a75d9fa3e3060b053cb38eac4c5c673bfe2a41c772_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f4927579a55325aff443a687b205a5bc501cd76c4456eb5cb040ed7069b896e8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:22b1c051472b80f6d31e528852f46a2655cd98ab5034c17e7410fe7ff98038e7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4f3bef1750177e00106442a17752a974e3a811941a6ea7657bd092a9dbf87706_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:873e89fc2d9e078c19de3ee06a6a7003094666483c22c33ad8f6c6523748af47_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:e5ffecfc7ded3de6e1d75de519cf97d4cf15ee28381898c3316eb2cc7fc05f5f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:4f7f8515509882b36a95c109fb5372de195bf28924d5bce0ddfe025f71d597b3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:94b883cd401a08efc1cffcdb0d72637066662dbbb87ea333fec50e04398df716_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d7a5a53e94a0c5f871c01081b472d2973b7740a05b15dae7cafaeef793790a7a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f920481f708996edbc4ddc82bda2ea6c184a6adca21bd3d258ce0a5034318b56_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:1df9a040f6eaacaca9dfdabed3de15fc7a10bcb0d7cdb12fb64db008a3a87d55_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:57466b1054122ae9d616104cd3c41f8d3c1a3c510e7cc2578923ee3daaa8060c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:598bbc8b366f87d23ff4e62a2144adb90b6ef302b4e7efe7651b3a2a7bfa5858_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:de654aef03a61d18db6b5806d0397a2ea913f001341c0f71d0048bbded160990_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:506d28cb18be265378d3fa9732fe363e680f73605c1e5089a47f831bfb70bc3d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7edb2ca12ef15a090ed4169cb8618bc131a02f20a7b3e2e665fd4a8a862eec95_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b86b487802600bd2dc1bb49d0ebb90066658ed423e1c2eabb4fd85a9afac0e06_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c988e9854b206ec43fdce4fa6c3d3787cb438cecf936b3c2c7f78034227da6a2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5cfefcf34e2b6aaa3007aa6e23833ec6bf807fcc917068fb20dd2d24ad928ebc_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8dba2033ba3161d00121961cdb86a5d4d96c05a873b9ccb6b1492a0e6e3d63b4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:acd380102a9470c92bf5579445548ec59f506a8357638e528ebde1486d7d2f7a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ed3dda6f99cb789b2fcd00768a8992fdaefd66eedc13091b4ec71636ae45180f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0250bc715e7a879518e5933678bdfe7a9ea79524fb54bbc21468bb38b87910c6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4e802bcd67c6d552fd4303103c098f8cd63b118d5aaf5fe518132bf7d16c210e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d75706da01899800ac1f1f3b2b9e2eea4d2635e9d0cf9a53a68a547e1d3e0ac3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ef8495916e6317b146a3ddd007c29885eaafeabbb2bda08f56f1d11d1b459be1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:1508137ce628d456a5a50d966b399ce7a7aa5500af3a7cb4f077d9d65da59af1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:2315962c0f8025b8edcc8e8a2a9ea48a44db9066a1fc49fcf822a9a72939c5a8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:8e3dcc4a2f74a42942771078262499c65862021fa030114837f84501d5a9e452_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:a3cc1a59f847dd52355713b2dff429d435e387841a942544069e00677216e727_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5c3f5d6f40bbf49f396cfb37bc7db44663e6d57d84d6aaf76d4beaf4c9dde652_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a50666e44e11d4babf1b2a4bc223a46dafea5f6e38d366bb36c8fff1a985638_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:bc76118c296d9864dbd13d0759e3dd564ea969c55e5c7bd0ff48531b0665b204_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:ccd7fca68979a061243fec3b4a0d477ebd6b01e31d6b50b9ca775f8a33516978_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:093fdac33650bc2d1d136024d0082ca6d527319c49372e7dcc62a01048ad8265_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2d21aab8de8ba00af7049f5cc1150f341c20b9c4f4607a9ce12bf898791318ef_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a74a7e175474586c81ecd58e9858b5ce68930b2926ae164dc94bdc42746edf5f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:b2c522e77061272aec9209b53474f1522239b114c62033600491fe5c7343207b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1296546277a1a00386e6bd0364e8e65f54d2a57b4aa2c18cebf5b46d5ebd8943_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:202cbd3a192f28455f31469167219ca8a9a22500c81078c4479c2eb8db974dd0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:46fa2c55e2535677a4778cc17703a6b13e3db1fcae3a91ad84cf1a2399d00618_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:8478f7c09aa3c63c576c3ae182bd4c8cd76f61ca992a02c3e995f0728f1125f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5fd6897e6417b9959ebdface7eef63b2d10893bd03a25ce8663779452891b643_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c300783c024c2b2b89f564e89226537af752e97b6d8851a22f925652f3af741c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ce39757e08deeec88137165e0d9551f8ee2cd96b6e15db30df285cd117f0cc31_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:eb6b1ba6f319dc115fe3b669f4d1dd1aa886c967a8b0607acdb62e5b3cbb6c61_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14a1242a70933349653b197f67ed82ad44e6f15e538da82323c54e40475e105d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2c1f2ed482705bb63b0735a48c793c0c05c2cf7b8ef4f880fc94f5163dd10ce6_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4a6ef79ffa40e508257f84a88784b5facb0f3c08f029821b214a3547ed4fc01e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5a866383d9f4977b85ce3a46e4c3d05f6ad3bc3f46a3a3749ac3dda69c99fe0e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:8e727ff6fc10dca05724d0ef32facd52c714e41d32cbbdee66dd9a119d48a63c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b67bc5198e5e716839d323b4f198d69a1f05fb6686200ec81fc3790c2f4040c3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b80db1eec52e300101e990f786491111660a6abc08247646b76d3e7814d5d39e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d4d40fb6beaf5e3bc9c9a5e0e50432c64d7fbcb01a2be3ce04a263d14ee28ccd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4de85fb645c49673a188cf16d9c5f60f6c22165f2c17d9d9575a261156895628_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e5daf53e758944f1bd73189320af6df8c73a1288990dbd9fab71617b417eec4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:7e9cea4d99b8199f55c3568e7df4735e809434da82015a554ec30c31a21eda49_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:b2c33fa73936ff22062bfe1b223f4ec9cfd9262b583e2909f1b893fa886a91f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:43c08b788b7685a00b7a3c2b42b9d84e321ae1a007eb283a67d89c64332728ad_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:854b5ffea55e0fba6c4670a3c7b4a5294109cdad00f4eec01c7324748abec404_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:bdf8bd3b7f1961eba158060680908bfc0bf77cba9773a47ce1f39a89be41a43b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:dceaebb7604ee432f44939632f88d72d52abb3f2bfc4e175c8adcfdb5aca928d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4f021c6ac93ab2867ecbf05920aa61ef498d00322dda77c93bd253b4b4804e8e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:6f99f95216c88a38b67b198f5e5dbb55275aac334bbd56ca9126de9bf93f2471_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:7ac4b491c48650651e774b0c4231d76c1815cee8dfe890960cb377705ad58118_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:a0a26d867f76d94a860711c0fc51eb9267cc4086bc696bc1367b941adc934398_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:22c0c70b69645c5e6a5630b6623aa857afbe753d4ea5151e86fd2ec88d67f886_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3c7531d2afacc243b442795102d961f9ec111d33409a09a31b7e9bed0a75d52f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:41a088ac743ca90308ba0738471fab5b7ba12c0d5a88c88aed12f19c5cf9ae3b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b4dba38a06b90ec9a88ba2541429cd19d2a03588944045a5c0c4c33988329d07_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:09caff77bc08c100f903b69998dd30347d79f0a0aed7ac245e3194838ecd4752_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:56333a348a639bebf9d6d2b1f4524bd274aa696ec73763deb668226e9e12d8e2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:6ae2fd22e8ca81684ffa10a3f549dd29c823661970b8bbd84a40f7255f58c979_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:78f90c81ddad11660c58c1fab0c5003cdbc22bd76bfb8dd0b5ff5bff1e01745e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:6346b47545f668a23f2f02141291bcb30650a2fad1a56d97aae8b20baf986682_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c19d40c8de026714cd9a19bc5de7ea022e3ae9955b7b4299e9cbde69e92b780_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ad7e9c1a2236ba34da8f5349f1fa7b35fcea8981d9257af8fca0a1ecc4d5a61d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:df9ff018f6bd33041f426329cac6e14e4468282df52ee475b755d5d8710f56cd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ce79b72cbf2efe3cc2fba42204727c131bcaa1960758d4b32aeb4caf70a0748_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2e1c9dfc53b85cfeb82e45d02096372250d6ea6c83cb31088a0fd9a451c6d392_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:68f36aa5c5366024fa29e5b9a4915acc4139208b9113a574384dd8140f7ae1a2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:6a9b939d4d13a9a74e5083cb7684d50742020f1961720a346456e7431e592bf3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:1521447f3d76f4ba1e4cb92bd166285c5c8c19eb2976334817e0118ea163ee3e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:5bd59b8e52e5af5a6c5946c383eaa762bbfa7b144b7b888172f14d10b5ad573f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8aa0747c0ec6ba40947f6dd1464d56c5bfbc15225367cfb1ffc0a6fe65481c30_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:ade9141784f5c838a9c0125198ba84878f319827f38ddde98906754e316bae76_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0a0bc45b8a6a284a762fb9f9a3b2a9025e62fcd3e9e0ac69a539089c474f25c2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:83f554f65cc051c21f4a6779afac27abc4410b4aaa150a63b992dca529318d0d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e5df66a9050e8856d2bc4eed3ca3b92895b7842b06d6dd1c93e32f999ccad1de_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e89f1932aaabd42c5b7be791305a427f1fb811719296c1bddfac49edd771fa47_arm64	—	Workaround

Threats

Impact Important

CVE-2026-27145

A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:18c24d419df62a0eea1661c1ee045d90c0af6b9b1b026db79ecb194eb90da729_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b2d8de5fe912b7310f3101c2643ef11dbcbbf1ce9c615bd08ed6b51d33e1524c_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ce6f63545309f77de13631a75d9fa3e3060b053cb38eac4c5c673bfe2a41c772_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f4927579a55325aff443a687b205a5bc501cd76c4456eb5cb040ed7069b896e8_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:22b1c051472b80f6d31e528852f46a2655cd98ab5034c17e7410fe7ff98038e7_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4f3bef1750177e00106442a17752a974e3a811941a6ea7657bd092a9dbf87706_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:873e89fc2d9e078c19de3ee06a6a7003094666483c22c33ad8f6c6523748af47_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:e5ffecfc7ded3de6e1d75de519cf97d4cf15ee28381898c3316eb2cc7fc05f5f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:287b38d7b3aa46678586893d851d97678a658d4f39296c1f3e1affeacab3853b_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:37e1500f9cc565c8f4535ac03ad3e90ce9e294b774ef41f424d6cea9d10ec2f0_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:6d60190c43b31caa8ca02f1f72ea9a8d9a3698cd3e0da4275eeb3366b11c1db0_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:8c0fb8a431c0bf8b237c9485f91fe03e15eae120233bae363dbfb8239631a7ea_amd64	—	Vendor Fix fix Workaround

Known not affected 112 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:120becd4f1b2a36f48a43d2933b7a1be1595cc2cb626d44a053033d010e6aac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:610df72fa91b7ff983c5698c08462a2c77ec60d2940e8c0048054d14fd0a3e31_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:675af2b54df773d590a2543225c7c5cce1e9a6b0f3651a8e454c02dde506a580_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b69db5c2aac4decf99a4c97c09e9c7055b642c4849f7e78d74f78877702428e8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:17b907f3bc67fe68c91f72a5fac1a2320ef0ceb642a7ff7359781ef627f660c2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1c7f83bf0ff1d3231bc3d2c8559708671e58229e4ddcbd1db8607559d0564fed_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:67fe0a996cbb7af417edf2b4b7b7cac1c1d638e0cfe8d0e684c8d4314814de49_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:864cfbceb2af949ad1f7d0db61bb0a93346db74188314c3fe03892a2daf156ad_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:019c1264ffad487a41578bf33209d997303a491194491d0d4332b15602086ac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4ef3304a33a387668f0b5fa1b6998e64062cd61e19aa3b49b444400d4ba5b229_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:b8606468aabd58cc015ee48aadbe7d69bf2ceedf25466c201303fdeb01aeedb0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:e45ef752eeafd85f33f0b87e955055b701522a99c01b5b1662997015cda0e236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:07502045ec816b13a5aab5f5bcdf8c50242a2b8acbd15e3fa2dbb2faa25d2ed3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:104cfeb03d0b29b7e76516aa3ac8072366efeef5c136b68f7c3e8e0ad5ce1b96_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e3445247fb19830ca4840fc26918d1154d53e1ae735d139473fe470db09a3efe_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:fa831832da15a85b49d52812220f3e6de82793461016cc659577113c0a5a0a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22d2a996d18d00f5985f381e395b33186c2af759fba010bec0cc9f3120be3d3a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:51b926dc40fa8abe32f1a31f419d6e38d2ac322dc5973650bf0326afd841edd7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c86653f45ed8c480589f2d3cde84e1de45e23dbdeb7dcc398d5f0121ebc9215f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:dbe55cb7c87224ae10d5b157ef5e66a4ffe4788bfb134a3db47d2c1bceab4eec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:0815b6568f3c2df6d86aa70458a3037d0251f58a673244f13defcfa9053d4019_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:2fc1ac0ac7950482cc4ee05aea133af511ebfcfbe45e0fa3d13f33c983a1a75a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:48d38b946e601b8bfebe7fac00d538f01b6e565f01f76681059af7001d1a42a6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:81b31ada806558c18afb7bfcdaf1bc74ae92245e2f42aade9d80c59be2fa9a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3b69bad711b3358fa22546c193d0b7d15c96c1b0c445b36da1d426695516634d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:72514aafb15a0988ec5d65cd01a90bd0c58010cce32af69c3d42b4d3a051a892_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:aa964bc0245cd01f2077b2f28567048ccb638cb899eefa66383dbcc2d53bcf3d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:affbb00a938b6306fc357de5f5b5b48c1bc493a280b9db94cc0a5d545337934f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:4f7f8515509882b36a95c109fb5372de195bf28924d5bce0ddfe025f71d597b3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:94b883cd401a08efc1cffcdb0d72637066662dbbb87ea333fec50e04398df716_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d7a5a53e94a0c5f871c01081b472d2973b7740a05b15dae7cafaeef793790a7a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f920481f708996edbc4ddc82bda2ea6c184a6adca21bd3d258ce0a5034318b56_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:1df9a040f6eaacaca9dfdabed3de15fc7a10bcb0d7cdb12fb64db008a3a87d55_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:57466b1054122ae9d616104cd3c41f8d3c1a3c510e7cc2578923ee3daaa8060c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:598bbc8b366f87d23ff4e62a2144adb90b6ef302b4e7efe7651b3a2a7bfa5858_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:de654aef03a61d18db6b5806d0397a2ea913f001341c0f71d0048bbded160990_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:506d28cb18be265378d3fa9732fe363e680f73605c1e5089a47f831bfb70bc3d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7edb2ca12ef15a090ed4169cb8618bc131a02f20a7b3e2e665fd4a8a862eec95_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b86b487802600bd2dc1bb49d0ebb90066658ed423e1c2eabb4fd85a9afac0e06_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c988e9854b206ec43fdce4fa6c3d3787cb438cecf936b3c2c7f78034227da6a2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5cfefcf34e2b6aaa3007aa6e23833ec6bf807fcc917068fb20dd2d24ad928ebc_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8dba2033ba3161d00121961cdb86a5d4d96c05a873b9ccb6b1492a0e6e3d63b4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:acd380102a9470c92bf5579445548ec59f506a8357638e528ebde1486d7d2f7a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ed3dda6f99cb789b2fcd00768a8992fdaefd66eedc13091b4ec71636ae45180f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0250bc715e7a879518e5933678bdfe7a9ea79524fb54bbc21468bb38b87910c6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4e802bcd67c6d552fd4303103c098f8cd63b118d5aaf5fe518132bf7d16c210e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d75706da01899800ac1f1f3b2b9e2eea4d2635e9d0cf9a53a68a547e1d3e0ac3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ef8495916e6317b146a3ddd007c29885eaafeabbb2bda08f56f1d11d1b459be1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:1508137ce628d456a5a50d966b399ce7a7aa5500af3a7cb4f077d9d65da59af1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:2315962c0f8025b8edcc8e8a2a9ea48a44db9066a1fc49fcf822a9a72939c5a8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:8e3dcc4a2f74a42942771078262499c65862021fa030114837f84501d5a9e452_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:a3cc1a59f847dd52355713b2dff429d435e387841a942544069e00677216e727_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5c3f5d6f40bbf49f396cfb37bc7db44663e6d57d84d6aaf76d4beaf4c9dde652_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a50666e44e11d4babf1b2a4bc223a46dafea5f6e38d366bb36c8fff1a985638_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:bc76118c296d9864dbd13d0759e3dd564ea969c55e5c7bd0ff48531b0665b204_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:ccd7fca68979a061243fec3b4a0d477ebd6b01e31d6b50b9ca775f8a33516978_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:093fdac33650bc2d1d136024d0082ca6d527319c49372e7dcc62a01048ad8265_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2d21aab8de8ba00af7049f5cc1150f341c20b9c4f4607a9ce12bf898791318ef_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a74a7e175474586c81ecd58e9858b5ce68930b2926ae164dc94bdc42746edf5f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:b2c522e77061272aec9209b53474f1522239b114c62033600491fe5c7343207b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1296546277a1a00386e6bd0364e8e65f54d2a57b4aa2c18cebf5b46d5ebd8943_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:202cbd3a192f28455f31469167219ca8a9a22500c81078c4479c2eb8db974dd0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:46fa2c55e2535677a4778cc17703a6b13e3db1fcae3a91ad84cf1a2399d00618_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:8478f7c09aa3c63c576c3ae182bd4c8cd76f61ca992a02c3e995f0728f1125f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5fd6897e6417b9959ebdface7eef63b2d10893bd03a25ce8663779452891b643_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c300783c024c2b2b89f564e89226537af752e97b6d8851a22f925652f3af741c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ce39757e08deeec88137165e0d9551f8ee2cd96b6e15db30df285cd117f0cc31_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:eb6b1ba6f319dc115fe3b669f4d1dd1aa886c967a8b0607acdb62e5b3cbb6c61_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14a1242a70933349653b197f67ed82ad44e6f15e538da82323c54e40475e105d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2c1f2ed482705bb63b0735a48c793c0c05c2cf7b8ef4f880fc94f5163dd10ce6_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4a6ef79ffa40e508257f84a88784b5facb0f3c08f029821b214a3547ed4fc01e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5a866383d9f4977b85ce3a46e4c3d05f6ad3bc3f46a3a3749ac3dda69c99fe0e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:8e727ff6fc10dca05724d0ef32facd52c714e41d32cbbdee66dd9a119d48a63c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b67bc5198e5e716839d323b4f198d69a1f05fb6686200ec81fc3790c2f4040c3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b80db1eec52e300101e990f786491111660a6abc08247646b76d3e7814d5d39e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d4d40fb6beaf5e3bc9c9a5e0e50432c64d7fbcb01a2be3ce04a263d14ee28ccd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4de85fb645c49673a188cf16d9c5f60f6c22165f2c17d9d9575a261156895628_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e5daf53e758944f1bd73189320af6df8c73a1288990dbd9fab71617b417eec4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:7e9cea4d99b8199f55c3568e7df4735e809434da82015a554ec30c31a21eda49_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:b2c33fa73936ff22062bfe1b223f4ec9cfd9262b583e2909f1b893fa886a91f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:43c08b788b7685a00b7a3c2b42b9d84e321ae1a007eb283a67d89c64332728ad_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:854b5ffea55e0fba6c4670a3c7b4a5294109cdad00f4eec01c7324748abec404_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:bdf8bd3b7f1961eba158060680908bfc0bf77cba9773a47ce1f39a89be41a43b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:dceaebb7604ee432f44939632f88d72d52abb3f2bfc4e175c8adcfdb5aca928d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4f021c6ac93ab2867ecbf05920aa61ef498d00322dda77c93bd253b4b4804e8e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:6f99f95216c88a38b67b198f5e5dbb55275aac334bbd56ca9126de9bf93f2471_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:7ac4b491c48650651e774b0c4231d76c1815cee8dfe890960cb377705ad58118_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:a0a26d867f76d94a860711c0fc51eb9267cc4086bc696bc1367b941adc934398_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:22c0c70b69645c5e6a5630b6623aa857afbe753d4ea5151e86fd2ec88d67f886_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3c7531d2afacc243b442795102d961f9ec111d33409a09a31b7e9bed0a75d52f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:41a088ac743ca90308ba0738471fab5b7ba12c0d5a88c88aed12f19c5cf9ae3b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b4dba38a06b90ec9a88ba2541429cd19d2a03588944045a5c0c4c33988329d07_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:09caff77bc08c100f903b69998dd30347d79f0a0aed7ac245e3194838ecd4752_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:56333a348a639bebf9d6d2b1f4524bd274aa696ec73763deb668226e9e12d8e2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:6ae2fd22e8ca81684ffa10a3f549dd29c823661970b8bbd84a40f7255f58c979_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:78f90c81ddad11660c58c1fab0c5003cdbc22bd76bfb8dd0b5ff5bff1e01745e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:6346b47545f668a23f2f02141291bcb30650a2fad1a56d97aae8b20baf986682_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c19d40c8de026714cd9a19bc5de7ea022e3ae9955b7b4299e9cbde69e92b780_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ad7e9c1a2236ba34da8f5349f1fa7b35fcea8981d9257af8fca0a1ecc4d5a61d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:df9ff018f6bd33041f426329cac6e14e4468282df52ee475b755d5d8710f56cd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ce79b72cbf2efe3cc2fba42204727c131bcaa1960758d4b32aeb4caf70a0748_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2e1c9dfc53b85cfeb82e45d02096372250d6ea6c83cb31088a0fd9a451c6d392_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:68f36aa5c5366024fa29e5b9a4915acc4139208b9113a574384dd8140f7ae1a2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:6a9b939d4d13a9a74e5083cb7684d50742020f1961720a346456e7431e592bf3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:1521447f3d76f4ba1e4cb92bd166285c5c8c19eb2976334817e0118ea163ee3e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:5bd59b8e52e5af5a6c5946c383eaa762bbfa7b144b7b888172f14d10b5ad573f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8aa0747c0ec6ba40947f6dd1464d56c5bfbc15225367cfb1ffc0a6fe65481c30_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:ade9141784f5c838a9c0125198ba84878f319827f38ddde98906754e316bae76_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0a0bc45b8a6a284a762fb9f9a3b2a9025e62fcd3e9e0ac69a539089c474f25c2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:83f554f65cc051c21f4a6779afac27abc4410b4aaa150a63b992dca529318d0d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e5df66a9050e8856d2bc4eed3ca3b92895b7842b06d6dd1c93e32f999ccad1de_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e89f1932aaabd42c5b7be791305a427f1fb811719296c1bddfac49edd771fa47_arm64	—	Workaround

Threats

Impact Important

CVE-2026-35469

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14a1242a70933349653b197f67ed82ad44e6f15e538da82323c54e40475e105d_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2c1f2ed482705bb63b0735a48c793c0c05c2cf7b8ef4f880fc94f5163dd10ce6_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4a6ef79ffa40e508257f84a88784b5facb0f3c08f029821b214a3547ed4fc01e_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5a866383d9f4977b85ce3a46e4c3d05f6ad3bc3f46a3a3749ac3dda69c99fe0e_arm64	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:120becd4f1b2a36f48a43d2933b7a1be1595cc2cb626d44a053033d010e6aac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:610df72fa91b7ff983c5698c08462a2c77ec60d2940e8c0048054d14fd0a3e31_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:675af2b54df773d590a2543225c7c5cce1e9a6b0f3651a8e454c02dde506a580_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b69db5c2aac4decf99a4c97c09e9c7055b642c4849f7e78d74f78877702428e8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:17b907f3bc67fe68c91f72a5fac1a2320ef0ceb642a7ff7359781ef627f660c2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1c7f83bf0ff1d3231bc3d2c8559708671e58229e4ddcbd1db8607559d0564fed_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:67fe0a996cbb7af417edf2b4b7b7cac1c1d638e0cfe8d0e684c8d4314814de49_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:864cfbceb2af949ad1f7d0db61bb0a93346db74188314c3fe03892a2daf156ad_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:019c1264ffad487a41578bf33209d997303a491194491d0d4332b15602086ac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4ef3304a33a387668f0b5fa1b6998e64062cd61e19aa3b49b444400d4ba5b229_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:b8606468aabd58cc015ee48aadbe7d69bf2ceedf25466c201303fdeb01aeedb0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:e45ef752eeafd85f33f0b87e955055b701522a99c01b5b1662997015cda0e236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:07502045ec816b13a5aab5f5bcdf8c50242a2b8acbd15e3fa2dbb2faa25d2ed3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:104cfeb03d0b29b7e76516aa3ac8072366efeef5c136b68f7c3e8e0ad5ce1b96_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e3445247fb19830ca4840fc26918d1154d53e1ae735d139473fe470db09a3efe_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:fa831832da15a85b49d52812220f3e6de82793461016cc659577113c0a5a0a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22d2a996d18d00f5985f381e395b33186c2af759fba010bec0cc9f3120be3d3a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:51b926dc40fa8abe32f1a31f419d6e38d2ac322dc5973650bf0326afd841edd7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c86653f45ed8c480589f2d3cde84e1de45e23dbdeb7dcc398d5f0121ebc9215f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:dbe55cb7c87224ae10d5b157ef5e66a4ffe4788bfb134a3db47d2c1bceab4eec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:0815b6568f3c2df6d86aa70458a3037d0251f58a673244f13defcfa9053d4019_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:2fc1ac0ac7950482cc4ee05aea133af511ebfcfbe45e0fa3d13f33c983a1a75a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:48d38b946e601b8bfebe7fac00d538f01b6e565f01f76681059af7001d1a42a6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:81b31ada806558c18afb7bfcdaf1bc74ae92245e2f42aade9d80c59be2fa9a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3b69bad711b3358fa22546c193d0b7d15c96c1b0c445b36da1d426695516634d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:72514aafb15a0988ec5d65cd01a90bd0c58010cce32af69c3d42b4d3a051a892_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:aa964bc0245cd01f2077b2f28567048ccb638cb899eefa66383dbcc2d53bcf3d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:affbb00a938b6306fc357de5f5b5b48c1bc493a280b9db94cc0a5d545337934f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:18c24d419df62a0eea1661c1ee045d90c0af6b9b1b026db79ecb194eb90da729_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b2d8de5fe912b7310f3101c2643ef11dbcbbf1ce9c615bd08ed6b51d33e1524c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ce6f63545309f77de13631a75d9fa3e3060b053cb38eac4c5c673bfe2a41c772_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f4927579a55325aff443a687b205a5bc501cd76c4456eb5cb040ed7069b896e8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:22b1c051472b80f6d31e528852f46a2655cd98ab5034c17e7410fe7ff98038e7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4f3bef1750177e00106442a17752a974e3a811941a6ea7657bd092a9dbf87706_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:873e89fc2d9e078c19de3ee06a6a7003094666483c22c33ad8f6c6523748af47_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:e5ffecfc7ded3de6e1d75de519cf97d4cf15ee28381898c3316eb2cc7fc05f5f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:4f7f8515509882b36a95c109fb5372de195bf28924d5bce0ddfe025f71d597b3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:94b883cd401a08efc1cffcdb0d72637066662dbbb87ea333fec50e04398df716_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d7a5a53e94a0c5f871c01081b472d2973b7740a05b15dae7cafaeef793790a7a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f920481f708996edbc4ddc82bda2ea6c184a6adca21bd3d258ce0a5034318b56_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:1df9a040f6eaacaca9dfdabed3de15fc7a10bcb0d7cdb12fb64db008a3a87d55_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:57466b1054122ae9d616104cd3c41f8d3c1a3c510e7cc2578923ee3daaa8060c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:598bbc8b366f87d23ff4e62a2144adb90b6ef302b4e7efe7651b3a2a7bfa5858_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:de654aef03a61d18db6b5806d0397a2ea913f001341c0f71d0048bbded160990_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:506d28cb18be265378d3fa9732fe363e680f73605c1e5089a47f831bfb70bc3d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7edb2ca12ef15a090ed4169cb8618bc131a02f20a7b3e2e665fd4a8a862eec95_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b86b487802600bd2dc1bb49d0ebb90066658ed423e1c2eabb4fd85a9afac0e06_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c988e9854b206ec43fdce4fa6c3d3787cb438cecf936b3c2c7f78034227da6a2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5cfefcf34e2b6aaa3007aa6e23833ec6bf807fcc917068fb20dd2d24ad928ebc_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8dba2033ba3161d00121961cdb86a5d4d96c05a873b9ccb6b1492a0e6e3d63b4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:acd380102a9470c92bf5579445548ec59f506a8357638e528ebde1486d7d2f7a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ed3dda6f99cb789b2fcd00768a8992fdaefd66eedc13091b4ec71636ae45180f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0250bc715e7a879518e5933678bdfe7a9ea79524fb54bbc21468bb38b87910c6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4e802bcd67c6d552fd4303103c098f8cd63b118d5aaf5fe518132bf7d16c210e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d75706da01899800ac1f1f3b2b9e2eea4d2635e9d0cf9a53a68a547e1d3e0ac3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ef8495916e6317b146a3ddd007c29885eaafeabbb2bda08f56f1d11d1b459be1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:1508137ce628d456a5a50d966b399ce7a7aa5500af3a7cb4f077d9d65da59af1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:2315962c0f8025b8edcc8e8a2a9ea48a44db9066a1fc49fcf822a9a72939c5a8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:8e3dcc4a2f74a42942771078262499c65862021fa030114837f84501d5a9e452_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:a3cc1a59f847dd52355713b2dff429d435e387841a942544069e00677216e727_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5c3f5d6f40bbf49f396cfb37bc7db44663e6d57d84d6aaf76d4beaf4c9dde652_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a50666e44e11d4babf1b2a4bc223a46dafea5f6e38d366bb36c8fff1a985638_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:bc76118c296d9864dbd13d0759e3dd564ea969c55e5c7bd0ff48531b0665b204_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:ccd7fca68979a061243fec3b4a0d477ebd6b01e31d6b50b9ca775f8a33516978_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:093fdac33650bc2d1d136024d0082ca6d527319c49372e7dcc62a01048ad8265_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2d21aab8de8ba00af7049f5cc1150f341c20b9c4f4607a9ce12bf898791318ef_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a74a7e175474586c81ecd58e9858b5ce68930b2926ae164dc94bdc42746edf5f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:b2c522e77061272aec9209b53474f1522239b114c62033600491fe5c7343207b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1296546277a1a00386e6bd0364e8e65f54d2a57b4aa2c18cebf5b46d5ebd8943_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:202cbd3a192f28455f31469167219ca8a9a22500c81078c4479c2eb8db974dd0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:46fa2c55e2535677a4778cc17703a6b13e3db1fcae3a91ad84cf1a2399d00618_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:8478f7c09aa3c63c576c3ae182bd4c8cd76f61ca992a02c3e995f0728f1125f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5fd6897e6417b9959ebdface7eef63b2d10893bd03a25ce8663779452891b643_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c300783c024c2b2b89f564e89226537af752e97b6d8851a22f925652f3af741c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ce39757e08deeec88137165e0d9551f8ee2cd96b6e15db30df285cd117f0cc31_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:eb6b1ba6f319dc115fe3b669f4d1dd1aa886c967a8b0607acdb62e5b3cbb6c61_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:8e727ff6fc10dca05724d0ef32facd52c714e41d32cbbdee66dd9a119d48a63c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b67bc5198e5e716839d323b4f198d69a1f05fb6686200ec81fc3790c2f4040c3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b80db1eec52e300101e990f786491111660a6abc08247646b76d3e7814d5d39e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d4d40fb6beaf5e3bc9c9a5e0e50432c64d7fbcb01a2be3ce04a263d14ee28ccd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4de85fb645c49673a188cf16d9c5f60f6c22165f2c17d9d9575a261156895628_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e5daf53e758944f1bd73189320af6df8c73a1288990dbd9fab71617b417eec4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:7e9cea4d99b8199f55c3568e7df4735e809434da82015a554ec30c31a21eda49_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:b2c33fa73936ff22062bfe1b223f4ec9cfd9262b583e2909f1b893fa886a91f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:43c08b788b7685a00b7a3c2b42b9d84e321ae1a007eb283a67d89c64332728ad_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:854b5ffea55e0fba6c4670a3c7b4a5294109cdad00f4eec01c7324748abec404_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:bdf8bd3b7f1961eba158060680908bfc0bf77cba9773a47ce1f39a89be41a43b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:dceaebb7604ee432f44939632f88d72d52abb3f2bfc4e175c8adcfdb5aca928d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4f021c6ac93ab2867ecbf05920aa61ef498d00322dda77c93bd253b4b4804e8e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:6f99f95216c88a38b67b198f5e5dbb55275aac334bbd56ca9126de9bf93f2471_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:7ac4b491c48650651e774b0c4231d76c1815cee8dfe890960cb377705ad58118_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:a0a26d867f76d94a860711c0fc51eb9267cc4086bc696bc1367b941adc934398_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:22c0c70b69645c5e6a5630b6623aa857afbe753d4ea5151e86fd2ec88d67f886_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3c7531d2afacc243b442795102d961f9ec111d33409a09a31b7e9bed0a75d52f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:41a088ac743ca90308ba0738471fab5b7ba12c0d5a88c88aed12f19c5cf9ae3b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b4dba38a06b90ec9a88ba2541429cd19d2a03588944045a5c0c4c33988329d07_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:09caff77bc08c100f903b69998dd30347d79f0a0aed7ac245e3194838ecd4752_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:56333a348a639bebf9d6d2b1f4524bd274aa696ec73763deb668226e9e12d8e2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:6ae2fd22e8ca81684ffa10a3f549dd29c823661970b8bbd84a40f7255f58c979_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:78f90c81ddad11660c58c1fab0c5003cdbc22bd76bfb8dd0b5ff5bff1e01745e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:6346b47545f668a23f2f02141291bcb30650a2fad1a56d97aae8b20baf986682_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c19d40c8de026714cd9a19bc5de7ea022e3ae9955b7b4299e9cbde69e92b780_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ad7e9c1a2236ba34da8f5349f1fa7b35fcea8981d9257af8fca0a1ecc4d5a61d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:df9ff018f6bd33041f426329cac6e14e4468282df52ee475b755d5d8710f56cd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:287b38d7b3aa46678586893d851d97678a658d4f39296c1f3e1affeacab3853b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:37e1500f9cc565c8f4535ac03ad3e90ce9e294b774ef41f424d6cea9d10ec2f0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:6d60190c43b31caa8ca02f1f72ea9a8d9a3698cd3e0da4275eeb3366b11c1db0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:8c0fb8a431c0bf8b237c9485f91fe03e15eae120233bae363dbfb8239631a7ea_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ce79b72cbf2efe3cc2fba42204727c131bcaa1960758d4b32aeb4caf70a0748_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2e1c9dfc53b85cfeb82e45d02096372250d6ea6c83cb31088a0fd9a451c6d392_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:68f36aa5c5366024fa29e5b9a4915acc4139208b9113a574384dd8140f7ae1a2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:6a9b939d4d13a9a74e5083cb7684d50742020f1961720a346456e7431e592bf3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:1521447f3d76f4ba1e4cb92bd166285c5c8c19eb2976334817e0118ea163ee3e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:5bd59b8e52e5af5a6c5946c383eaa762bbfa7b144b7b888172f14d10b5ad573f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8aa0747c0ec6ba40947f6dd1464d56c5bfbc15225367cfb1ffc0a6fe65481c30_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:ade9141784f5c838a9c0125198ba84878f319827f38ddde98906754e316bae76_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0a0bc45b8a6a284a762fb9f9a3b2a9025e62fcd3e9e0ac69a539089c474f25c2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:83f554f65cc051c21f4a6779afac27abc4410b4aaa150a63b992dca529318d0d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e5df66a9050e8856d2bc4eed3ca3b92895b7842b06d6dd1c93e32f999ccad1de_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e89f1932aaabd42c5b7be791305a427f1fb811719296c1bddfac49edd771fa47_arm64	—	Workaround

Threats

Impact Important

CVE-2026-66794

A flaw was found in the `cluster-proxy-addon` component of Multicluster Engine for Kubernetes. This vulnerability allows an unauthenticated attacker, who can access the user-facing route, to bypass authentication and authorization checks. By manipulating URL path segments, the attacker can proxy requests to arbitrary services across any managed cluster. This enables unauthorized access to internal services that would otherwise be protected, potentially leading to information disclosure or further compromise of the cluster environment.

9.3 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:4f7f8515509882b36a95c109fb5372de195bf28924d5bce0ddfe025f71d597b3_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:94b883cd401a08efc1cffcdb0d72637066662dbbb87ea333fec50e04398df716_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d7a5a53e94a0c5f871c01081b472d2973b7740a05b15dae7cafaeef793790a7a_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f920481f708996edbc4ddc82bda2ea6c184a6adca21bd3d258ce0a5034318b56_s390x	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:120becd4f1b2a36f48a43d2933b7a1be1595cc2cb626d44a053033d010e6aac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:610df72fa91b7ff983c5698c08462a2c77ec60d2940e8c0048054d14fd0a3e31_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:675af2b54df773d590a2543225c7c5cce1e9a6b0f3651a8e454c02dde506a580_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b69db5c2aac4decf99a4c97c09e9c7055b642c4849f7e78d74f78877702428e8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:17b907f3bc67fe68c91f72a5fac1a2320ef0ceb642a7ff7359781ef627f660c2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1c7f83bf0ff1d3231bc3d2c8559708671e58229e4ddcbd1db8607559d0564fed_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:67fe0a996cbb7af417edf2b4b7b7cac1c1d638e0cfe8d0e684c8d4314814de49_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:864cfbceb2af949ad1f7d0db61bb0a93346db74188314c3fe03892a2daf156ad_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:019c1264ffad487a41578bf33209d997303a491194491d0d4332b15602086ac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4ef3304a33a387668f0b5fa1b6998e64062cd61e19aa3b49b444400d4ba5b229_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:b8606468aabd58cc015ee48aadbe7d69bf2ceedf25466c201303fdeb01aeedb0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:e45ef752eeafd85f33f0b87e955055b701522a99c01b5b1662997015cda0e236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:07502045ec816b13a5aab5f5bcdf8c50242a2b8acbd15e3fa2dbb2faa25d2ed3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:104cfeb03d0b29b7e76516aa3ac8072366efeef5c136b68f7c3e8e0ad5ce1b96_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e3445247fb19830ca4840fc26918d1154d53e1ae735d139473fe470db09a3efe_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:fa831832da15a85b49d52812220f3e6de82793461016cc659577113c0a5a0a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22d2a996d18d00f5985f381e395b33186c2af759fba010bec0cc9f3120be3d3a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:51b926dc40fa8abe32f1a31f419d6e38d2ac322dc5973650bf0326afd841edd7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c86653f45ed8c480589f2d3cde84e1de45e23dbdeb7dcc398d5f0121ebc9215f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:dbe55cb7c87224ae10d5b157ef5e66a4ffe4788bfb134a3db47d2c1bceab4eec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:0815b6568f3c2df6d86aa70458a3037d0251f58a673244f13defcfa9053d4019_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:2fc1ac0ac7950482cc4ee05aea133af511ebfcfbe45e0fa3d13f33c983a1a75a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:48d38b946e601b8bfebe7fac00d538f01b6e565f01f76681059af7001d1a42a6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:81b31ada806558c18afb7bfcdaf1bc74ae92245e2f42aade9d80c59be2fa9a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3b69bad711b3358fa22546c193d0b7d15c96c1b0c445b36da1d426695516634d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:72514aafb15a0988ec5d65cd01a90bd0c58010cce32af69c3d42b4d3a051a892_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:aa964bc0245cd01f2077b2f28567048ccb638cb899eefa66383dbcc2d53bcf3d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:affbb00a938b6306fc357de5f5b5b48c1bc493a280b9db94cc0a5d545337934f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:18c24d419df62a0eea1661c1ee045d90c0af6b9b1b026db79ecb194eb90da729_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b2d8de5fe912b7310f3101c2643ef11dbcbbf1ce9c615bd08ed6b51d33e1524c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ce6f63545309f77de13631a75d9fa3e3060b053cb38eac4c5c673bfe2a41c772_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f4927579a55325aff443a687b205a5bc501cd76c4456eb5cb040ed7069b896e8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:22b1c051472b80f6d31e528852f46a2655cd98ab5034c17e7410fe7ff98038e7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4f3bef1750177e00106442a17752a974e3a811941a6ea7657bd092a9dbf87706_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:873e89fc2d9e078c19de3ee06a6a7003094666483c22c33ad8f6c6523748af47_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:e5ffecfc7ded3de6e1d75de519cf97d4cf15ee28381898c3316eb2cc7fc05f5f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:1df9a040f6eaacaca9dfdabed3de15fc7a10bcb0d7cdb12fb64db008a3a87d55_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:57466b1054122ae9d616104cd3c41f8d3c1a3c510e7cc2578923ee3daaa8060c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:598bbc8b366f87d23ff4e62a2144adb90b6ef302b4e7efe7651b3a2a7bfa5858_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:de654aef03a61d18db6b5806d0397a2ea913f001341c0f71d0048bbded160990_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:506d28cb18be265378d3fa9732fe363e680f73605c1e5089a47f831bfb70bc3d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7edb2ca12ef15a090ed4169cb8618bc131a02f20a7b3e2e665fd4a8a862eec95_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b86b487802600bd2dc1bb49d0ebb90066658ed423e1c2eabb4fd85a9afac0e06_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c988e9854b206ec43fdce4fa6c3d3787cb438cecf936b3c2c7f78034227da6a2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5cfefcf34e2b6aaa3007aa6e23833ec6bf807fcc917068fb20dd2d24ad928ebc_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8dba2033ba3161d00121961cdb86a5d4d96c05a873b9ccb6b1492a0e6e3d63b4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:acd380102a9470c92bf5579445548ec59f506a8357638e528ebde1486d7d2f7a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ed3dda6f99cb789b2fcd00768a8992fdaefd66eedc13091b4ec71636ae45180f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0250bc715e7a879518e5933678bdfe7a9ea79524fb54bbc21468bb38b87910c6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4e802bcd67c6d552fd4303103c098f8cd63b118d5aaf5fe518132bf7d16c210e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d75706da01899800ac1f1f3b2b9e2eea4d2635e9d0cf9a53a68a547e1d3e0ac3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ef8495916e6317b146a3ddd007c29885eaafeabbb2bda08f56f1d11d1b459be1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:1508137ce628d456a5a50d966b399ce7a7aa5500af3a7cb4f077d9d65da59af1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:2315962c0f8025b8edcc8e8a2a9ea48a44db9066a1fc49fcf822a9a72939c5a8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:8e3dcc4a2f74a42942771078262499c65862021fa030114837f84501d5a9e452_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:a3cc1a59f847dd52355713b2dff429d435e387841a942544069e00677216e727_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5c3f5d6f40bbf49f396cfb37bc7db44663e6d57d84d6aaf76d4beaf4c9dde652_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a50666e44e11d4babf1b2a4bc223a46dafea5f6e38d366bb36c8fff1a985638_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:bc76118c296d9864dbd13d0759e3dd564ea969c55e5c7bd0ff48531b0665b204_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:ccd7fca68979a061243fec3b4a0d477ebd6b01e31d6b50b9ca775f8a33516978_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:093fdac33650bc2d1d136024d0082ca6d527319c49372e7dcc62a01048ad8265_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2d21aab8de8ba00af7049f5cc1150f341c20b9c4f4607a9ce12bf898791318ef_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a74a7e175474586c81ecd58e9858b5ce68930b2926ae164dc94bdc42746edf5f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:b2c522e77061272aec9209b53474f1522239b114c62033600491fe5c7343207b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1296546277a1a00386e6bd0364e8e65f54d2a57b4aa2c18cebf5b46d5ebd8943_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:202cbd3a192f28455f31469167219ca8a9a22500c81078c4479c2eb8db974dd0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:46fa2c55e2535677a4778cc17703a6b13e3db1fcae3a91ad84cf1a2399d00618_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:8478f7c09aa3c63c576c3ae182bd4c8cd76f61ca992a02c3e995f0728f1125f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5fd6897e6417b9959ebdface7eef63b2d10893bd03a25ce8663779452891b643_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c300783c024c2b2b89f564e89226537af752e97b6d8851a22f925652f3af741c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ce39757e08deeec88137165e0d9551f8ee2cd96b6e15db30df285cd117f0cc31_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:eb6b1ba6f319dc115fe3b669f4d1dd1aa886c967a8b0607acdb62e5b3cbb6c61_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14a1242a70933349653b197f67ed82ad44e6f15e538da82323c54e40475e105d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2c1f2ed482705bb63b0735a48c793c0c05c2cf7b8ef4f880fc94f5163dd10ce6_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4a6ef79ffa40e508257f84a88784b5facb0f3c08f029821b214a3547ed4fc01e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5a866383d9f4977b85ce3a46e4c3d05f6ad3bc3f46a3a3749ac3dda69c99fe0e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:8e727ff6fc10dca05724d0ef32facd52c714e41d32cbbdee66dd9a119d48a63c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b67bc5198e5e716839d323b4f198d69a1f05fb6686200ec81fc3790c2f4040c3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b80db1eec52e300101e990f786491111660a6abc08247646b76d3e7814d5d39e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d4d40fb6beaf5e3bc9c9a5e0e50432c64d7fbcb01a2be3ce04a263d14ee28ccd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4de85fb645c49673a188cf16d9c5f60f6c22165f2c17d9d9575a261156895628_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e5daf53e758944f1bd73189320af6df8c73a1288990dbd9fab71617b417eec4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:7e9cea4d99b8199f55c3568e7df4735e809434da82015a554ec30c31a21eda49_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:b2c33fa73936ff22062bfe1b223f4ec9cfd9262b583e2909f1b893fa886a91f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:43c08b788b7685a00b7a3c2b42b9d84e321ae1a007eb283a67d89c64332728ad_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:854b5ffea55e0fba6c4670a3c7b4a5294109cdad00f4eec01c7324748abec404_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:bdf8bd3b7f1961eba158060680908bfc0bf77cba9773a47ce1f39a89be41a43b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:dceaebb7604ee432f44939632f88d72d52abb3f2bfc4e175c8adcfdb5aca928d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4f021c6ac93ab2867ecbf05920aa61ef498d00322dda77c93bd253b4b4804e8e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:6f99f95216c88a38b67b198f5e5dbb55275aac334bbd56ca9126de9bf93f2471_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:7ac4b491c48650651e774b0c4231d76c1815cee8dfe890960cb377705ad58118_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:a0a26d867f76d94a860711c0fc51eb9267cc4086bc696bc1367b941adc934398_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:22c0c70b69645c5e6a5630b6623aa857afbe753d4ea5151e86fd2ec88d67f886_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3c7531d2afacc243b442795102d961f9ec111d33409a09a31b7e9bed0a75d52f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:41a088ac743ca90308ba0738471fab5b7ba12c0d5a88c88aed12f19c5cf9ae3b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b4dba38a06b90ec9a88ba2541429cd19d2a03588944045a5c0c4c33988329d07_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:09caff77bc08c100f903b69998dd30347d79f0a0aed7ac245e3194838ecd4752_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:56333a348a639bebf9d6d2b1f4524bd274aa696ec73763deb668226e9e12d8e2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:6ae2fd22e8ca81684ffa10a3f549dd29c823661970b8bbd84a40f7255f58c979_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:78f90c81ddad11660c58c1fab0c5003cdbc22bd76bfb8dd0b5ff5bff1e01745e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:6346b47545f668a23f2f02141291bcb30650a2fad1a56d97aae8b20baf986682_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c19d40c8de026714cd9a19bc5de7ea022e3ae9955b7b4299e9cbde69e92b780_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ad7e9c1a2236ba34da8f5349f1fa7b35fcea8981d9257af8fca0a1ecc4d5a61d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:df9ff018f6bd33041f426329cac6e14e4468282df52ee475b755d5d8710f56cd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:287b38d7b3aa46678586893d851d97678a658d4f39296c1f3e1affeacab3853b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:37e1500f9cc565c8f4535ac03ad3e90ce9e294b774ef41f424d6cea9d10ec2f0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:6d60190c43b31caa8ca02f1f72ea9a8d9a3698cd3e0da4275eeb3366b11c1db0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:8c0fb8a431c0bf8b237c9485f91fe03e15eae120233bae363dbfb8239631a7ea_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ce79b72cbf2efe3cc2fba42204727c131bcaa1960758d4b32aeb4caf70a0748_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2e1c9dfc53b85cfeb82e45d02096372250d6ea6c83cb31088a0fd9a451c6d392_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:68f36aa5c5366024fa29e5b9a4915acc4139208b9113a574384dd8140f7ae1a2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:6a9b939d4d13a9a74e5083cb7684d50742020f1961720a346456e7431e592bf3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:1521447f3d76f4ba1e4cb92bd166285c5c8c19eb2976334817e0118ea163ee3e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:5bd59b8e52e5af5a6c5946c383eaa762bbfa7b144b7b888172f14d10b5ad573f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8aa0747c0ec6ba40947f6dd1464d56c5bfbc15225367cfb1ffc0a6fe65481c30_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:ade9141784f5c838a9c0125198ba84878f319827f38ddde98906754e316bae76_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0a0bc45b8a6a284a762fb9f9a3b2a9025e62fcd3e9e0ac69a539089c474f25c2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:83f554f65cc051c21f4a6779afac27abc4410b4aaa150a63b992dca529318d0d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e5df66a9050e8856d2bc4eed3ca3b92895b7842b06d6dd1c93e32f999ccad1de_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e89f1932aaabd42c5b7be791305a427f1fb811719296c1bddfac49edd771fa47_arm64	—	Workaround

Threats

Impact Important

CVE-2026-66795

A flaw was found in the managedcluster-import-controller. The Certificate Signing Request (CSR) auto-approval logic improperly validates incoming CSRs, specifically by not inspecting the signer name or decoding the PEM-encoded x509 CSR. This vulnerability allows a privileged service account on a spoke cluster to submit a malicious CSR. Successful exploitation can lead to privilege escalation, enabling the attacker to obtain administrative credentials on the hub cluster.

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-295 - Improper Certificate Validation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:43c08b788b7685a00b7a3c2b42b9d84e321ae1a007eb283a67d89c64332728ad_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:854b5ffea55e0fba6c4670a3c7b4a5294109cdad00f4eec01c7324748abec404_s390x	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:bdf8bd3b7f1961eba158060680908bfc0bf77cba9773a47ce1f39a89be41a43b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:dceaebb7604ee432f44939632f88d72d52abb3f2bfc4e175c8adcfdb5aca928d_ppc64le	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:120becd4f1b2a36f48a43d2933b7a1be1595cc2cb626d44a053033d010e6aac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:610df72fa91b7ff983c5698c08462a2c77ec60d2940e8c0048054d14fd0a3e31_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:675af2b54df773d590a2543225c7c5cce1e9a6b0f3651a8e454c02dde506a580_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b69db5c2aac4decf99a4c97c09e9c7055b642c4849f7e78d74f78877702428e8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:17b907f3bc67fe68c91f72a5fac1a2320ef0ceb642a7ff7359781ef627f660c2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1c7f83bf0ff1d3231bc3d2c8559708671e58229e4ddcbd1db8607559d0564fed_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:67fe0a996cbb7af417edf2b4b7b7cac1c1d638e0cfe8d0e684c8d4314814de49_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:864cfbceb2af949ad1f7d0db61bb0a93346db74188314c3fe03892a2daf156ad_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:019c1264ffad487a41578bf33209d997303a491194491d0d4332b15602086ac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4ef3304a33a387668f0b5fa1b6998e64062cd61e19aa3b49b444400d4ba5b229_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:b8606468aabd58cc015ee48aadbe7d69bf2ceedf25466c201303fdeb01aeedb0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:e45ef752eeafd85f33f0b87e955055b701522a99c01b5b1662997015cda0e236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:07502045ec816b13a5aab5f5bcdf8c50242a2b8acbd15e3fa2dbb2faa25d2ed3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:104cfeb03d0b29b7e76516aa3ac8072366efeef5c136b68f7c3e8e0ad5ce1b96_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e3445247fb19830ca4840fc26918d1154d53e1ae735d139473fe470db09a3efe_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:fa831832da15a85b49d52812220f3e6de82793461016cc659577113c0a5a0a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22d2a996d18d00f5985f381e395b33186c2af759fba010bec0cc9f3120be3d3a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:51b926dc40fa8abe32f1a31f419d6e38d2ac322dc5973650bf0326afd841edd7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c86653f45ed8c480589f2d3cde84e1de45e23dbdeb7dcc398d5f0121ebc9215f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:dbe55cb7c87224ae10d5b157ef5e66a4ffe4788bfb134a3db47d2c1bceab4eec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:0815b6568f3c2df6d86aa70458a3037d0251f58a673244f13defcfa9053d4019_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:2fc1ac0ac7950482cc4ee05aea133af511ebfcfbe45e0fa3d13f33c983a1a75a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:48d38b946e601b8bfebe7fac00d538f01b6e565f01f76681059af7001d1a42a6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:81b31ada806558c18afb7bfcdaf1bc74ae92245e2f42aade9d80c59be2fa9a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3b69bad711b3358fa22546c193d0b7d15c96c1b0c445b36da1d426695516634d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:72514aafb15a0988ec5d65cd01a90bd0c58010cce32af69c3d42b4d3a051a892_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:aa964bc0245cd01f2077b2f28567048ccb638cb899eefa66383dbcc2d53bcf3d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:affbb00a938b6306fc357de5f5b5b48c1bc493a280b9db94cc0a5d545337934f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:18c24d419df62a0eea1661c1ee045d90c0af6b9b1b026db79ecb194eb90da729_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b2d8de5fe912b7310f3101c2643ef11dbcbbf1ce9c615bd08ed6b51d33e1524c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ce6f63545309f77de13631a75d9fa3e3060b053cb38eac4c5c673bfe2a41c772_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f4927579a55325aff443a687b205a5bc501cd76c4456eb5cb040ed7069b896e8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:22b1c051472b80f6d31e528852f46a2655cd98ab5034c17e7410fe7ff98038e7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4f3bef1750177e00106442a17752a974e3a811941a6ea7657bd092a9dbf87706_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:873e89fc2d9e078c19de3ee06a6a7003094666483c22c33ad8f6c6523748af47_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:e5ffecfc7ded3de6e1d75de519cf97d4cf15ee28381898c3316eb2cc7fc05f5f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:4f7f8515509882b36a95c109fb5372de195bf28924d5bce0ddfe025f71d597b3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:94b883cd401a08efc1cffcdb0d72637066662dbbb87ea333fec50e04398df716_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d7a5a53e94a0c5f871c01081b472d2973b7740a05b15dae7cafaeef793790a7a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f920481f708996edbc4ddc82bda2ea6c184a6adca21bd3d258ce0a5034318b56_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:1df9a040f6eaacaca9dfdabed3de15fc7a10bcb0d7cdb12fb64db008a3a87d55_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:57466b1054122ae9d616104cd3c41f8d3c1a3c510e7cc2578923ee3daaa8060c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:598bbc8b366f87d23ff4e62a2144adb90b6ef302b4e7efe7651b3a2a7bfa5858_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:de654aef03a61d18db6b5806d0397a2ea913f001341c0f71d0048bbded160990_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:506d28cb18be265378d3fa9732fe363e680f73605c1e5089a47f831bfb70bc3d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7edb2ca12ef15a090ed4169cb8618bc131a02f20a7b3e2e665fd4a8a862eec95_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b86b487802600bd2dc1bb49d0ebb90066658ed423e1c2eabb4fd85a9afac0e06_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c988e9854b206ec43fdce4fa6c3d3787cb438cecf936b3c2c7f78034227da6a2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5cfefcf34e2b6aaa3007aa6e23833ec6bf807fcc917068fb20dd2d24ad928ebc_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8dba2033ba3161d00121961cdb86a5d4d96c05a873b9ccb6b1492a0e6e3d63b4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:acd380102a9470c92bf5579445548ec59f506a8357638e528ebde1486d7d2f7a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ed3dda6f99cb789b2fcd00768a8992fdaefd66eedc13091b4ec71636ae45180f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0250bc715e7a879518e5933678bdfe7a9ea79524fb54bbc21468bb38b87910c6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4e802bcd67c6d552fd4303103c098f8cd63b118d5aaf5fe518132bf7d16c210e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d75706da01899800ac1f1f3b2b9e2eea4d2635e9d0cf9a53a68a547e1d3e0ac3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ef8495916e6317b146a3ddd007c29885eaafeabbb2bda08f56f1d11d1b459be1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:1508137ce628d456a5a50d966b399ce7a7aa5500af3a7cb4f077d9d65da59af1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:2315962c0f8025b8edcc8e8a2a9ea48a44db9066a1fc49fcf822a9a72939c5a8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:8e3dcc4a2f74a42942771078262499c65862021fa030114837f84501d5a9e452_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:a3cc1a59f847dd52355713b2dff429d435e387841a942544069e00677216e727_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5c3f5d6f40bbf49f396cfb37bc7db44663e6d57d84d6aaf76d4beaf4c9dde652_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a50666e44e11d4babf1b2a4bc223a46dafea5f6e38d366bb36c8fff1a985638_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:bc76118c296d9864dbd13d0759e3dd564ea969c55e5c7bd0ff48531b0665b204_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:ccd7fca68979a061243fec3b4a0d477ebd6b01e31d6b50b9ca775f8a33516978_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:093fdac33650bc2d1d136024d0082ca6d527319c49372e7dcc62a01048ad8265_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2d21aab8de8ba00af7049f5cc1150f341c20b9c4f4607a9ce12bf898791318ef_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a74a7e175474586c81ecd58e9858b5ce68930b2926ae164dc94bdc42746edf5f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:b2c522e77061272aec9209b53474f1522239b114c62033600491fe5c7343207b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1296546277a1a00386e6bd0364e8e65f54d2a57b4aa2c18cebf5b46d5ebd8943_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:202cbd3a192f28455f31469167219ca8a9a22500c81078c4479c2eb8db974dd0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:46fa2c55e2535677a4778cc17703a6b13e3db1fcae3a91ad84cf1a2399d00618_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:8478f7c09aa3c63c576c3ae182bd4c8cd76f61ca992a02c3e995f0728f1125f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5fd6897e6417b9959ebdface7eef63b2d10893bd03a25ce8663779452891b643_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c300783c024c2b2b89f564e89226537af752e97b6d8851a22f925652f3af741c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ce39757e08deeec88137165e0d9551f8ee2cd96b6e15db30df285cd117f0cc31_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:eb6b1ba6f319dc115fe3b669f4d1dd1aa886c967a8b0607acdb62e5b3cbb6c61_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14a1242a70933349653b197f67ed82ad44e6f15e538da82323c54e40475e105d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2c1f2ed482705bb63b0735a48c793c0c05c2cf7b8ef4f880fc94f5163dd10ce6_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4a6ef79ffa40e508257f84a88784b5facb0f3c08f029821b214a3547ed4fc01e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5a866383d9f4977b85ce3a46e4c3d05f6ad3bc3f46a3a3749ac3dda69c99fe0e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:8e727ff6fc10dca05724d0ef32facd52c714e41d32cbbdee66dd9a119d48a63c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b67bc5198e5e716839d323b4f198d69a1f05fb6686200ec81fc3790c2f4040c3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b80db1eec52e300101e990f786491111660a6abc08247646b76d3e7814d5d39e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d4d40fb6beaf5e3bc9c9a5e0e50432c64d7fbcb01a2be3ce04a263d14ee28ccd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4de85fb645c49673a188cf16d9c5f60f6c22165f2c17d9d9575a261156895628_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e5daf53e758944f1bd73189320af6df8c73a1288990dbd9fab71617b417eec4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:7e9cea4d99b8199f55c3568e7df4735e809434da82015a554ec30c31a21eda49_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:b2c33fa73936ff22062bfe1b223f4ec9cfd9262b583e2909f1b893fa886a91f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4f021c6ac93ab2867ecbf05920aa61ef498d00322dda77c93bd253b4b4804e8e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:6f99f95216c88a38b67b198f5e5dbb55275aac334bbd56ca9126de9bf93f2471_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:7ac4b491c48650651e774b0c4231d76c1815cee8dfe890960cb377705ad58118_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:a0a26d867f76d94a860711c0fc51eb9267cc4086bc696bc1367b941adc934398_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:22c0c70b69645c5e6a5630b6623aa857afbe753d4ea5151e86fd2ec88d67f886_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3c7531d2afacc243b442795102d961f9ec111d33409a09a31b7e9bed0a75d52f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:41a088ac743ca90308ba0738471fab5b7ba12c0d5a88c88aed12f19c5cf9ae3b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b4dba38a06b90ec9a88ba2541429cd19d2a03588944045a5c0c4c33988329d07_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:09caff77bc08c100f903b69998dd30347d79f0a0aed7ac245e3194838ecd4752_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:56333a348a639bebf9d6d2b1f4524bd274aa696ec73763deb668226e9e12d8e2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:6ae2fd22e8ca81684ffa10a3f549dd29c823661970b8bbd84a40f7255f58c979_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:78f90c81ddad11660c58c1fab0c5003cdbc22bd76bfb8dd0b5ff5bff1e01745e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:6346b47545f668a23f2f02141291bcb30650a2fad1a56d97aae8b20baf986682_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c19d40c8de026714cd9a19bc5de7ea022e3ae9955b7b4299e9cbde69e92b780_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ad7e9c1a2236ba34da8f5349f1fa7b35fcea8981d9257af8fca0a1ecc4d5a61d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:df9ff018f6bd33041f426329cac6e14e4468282df52ee475b755d5d8710f56cd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:287b38d7b3aa46678586893d851d97678a658d4f39296c1f3e1affeacab3853b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:37e1500f9cc565c8f4535ac03ad3e90ce9e294b774ef41f424d6cea9d10ec2f0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:6d60190c43b31caa8ca02f1f72ea9a8d9a3698cd3e0da4275eeb3366b11c1db0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:8c0fb8a431c0bf8b237c9485f91fe03e15eae120233bae363dbfb8239631a7ea_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ce79b72cbf2efe3cc2fba42204727c131bcaa1960758d4b32aeb4caf70a0748_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2e1c9dfc53b85cfeb82e45d02096372250d6ea6c83cb31088a0fd9a451c6d392_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:68f36aa5c5366024fa29e5b9a4915acc4139208b9113a574384dd8140f7ae1a2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:6a9b939d4d13a9a74e5083cb7684d50742020f1961720a346456e7431e592bf3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:1521447f3d76f4ba1e4cb92bd166285c5c8c19eb2976334817e0118ea163ee3e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:5bd59b8e52e5af5a6c5946c383eaa762bbfa7b144b7b888172f14d10b5ad573f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8aa0747c0ec6ba40947f6dd1464d56c5bfbc15225367cfb1ffc0a6fe65481c30_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:ade9141784f5c838a9c0125198ba84878f319827f38ddde98906754e316bae76_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0a0bc45b8a6a284a762fb9f9a3b2a9025e62fcd3e9e0ac69a539089c474f25c2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:83f554f65cc051c21f4a6779afac27abc4410b4aaa150a63b992dca529318d0d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e5df66a9050e8856d2bc4eed3ca3b92895b7842b06d6dd1c93e32f999ccad1de_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e89f1932aaabd42c5b7be791305a427f1fb811719296c1bddfac49edd771fa47_arm64	—	Workaround

Threats

Impact Important

CVE-2026-66804

A flaw was found in the console component. An authenticated user can exploit a Server-Side Request Forgery (SSRF) vulnerability by manipulating the `towerHost` parameter when accessing the `/ansibletower` handler. This allows the user to bypass pathname validation and access arbitrary internal or external hosts. The primary consequence is the exfiltration of full HTTP responses, leading to information disclosure from the affected system.

7.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 4 products, the same list as for CVE-2026-12143

Known not affected 120 products, the same list as for CVE-2026-12143

Threats

Impact Important

CVE-2026-73266

A flaw was found in the clusterclaims-controller component of Multicluster Engine (MCE). An authenticated tenant can exploit this vulnerability by manipulating ClusterClaim labels. This allows the tenant to force a cluster to join a ManagedClusterSet belonging to another tenant. Such unauthorized access could enable the injection of policies and workloads into other tenants' clusters.

7.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

CWE-441 - Unintended Proxy or Intermediary ('Confused Deputy')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:506d28cb18be265378d3fa9732fe363e680f73605c1e5089a47f831bfb70bc3d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7edb2ca12ef15a090ed4169cb8618bc131a02f20a7b3e2e665fd4a8a862eec95_arm64	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b86b487802600bd2dc1bb49d0ebb90066658ed423e1c2eabb4fd85a9afac0e06_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c988e9854b206ec43fdce4fa6c3d3787cb438cecf936b3c2c7f78034227da6a2_s390x	—	Vendor Fix fix Workaround

Known not affected 120 products

Product	Version	Remediation
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:120becd4f1b2a36f48a43d2933b7a1be1595cc2cb626d44a053033d010e6aac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:610df72fa91b7ff983c5698c08462a2c77ec60d2940e8c0048054d14fd0a3e31_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:675af2b54df773d590a2543225c7c5cce1e9a6b0f3651a8e454c02dde506a580_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b69db5c2aac4decf99a4c97c09e9c7055b642c4849f7e78d74f78877702428e8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:17b907f3bc67fe68c91f72a5fac1a2320ef0ceb642a7ff7359781ef627f660c2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1c7f83bf0ff1d3231bc3d2c8559708671e58229e4ddcbd1db8607559d0564fed_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:67fe0a996cbb7af417edf2b4b7b7cac1c1d638e0cfe8d0e684c8d4314814de49_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:864cfbceb2af949ad1f7d0db61bb0a93346db74188314c3fe03892a2daf156ad_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:019c1264ffad487a41578bf33209d997303a491194491d0d4332b15602086ac7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4ef3304a33a387668f0b5fa1b6998e64062cd61e19aa3b49b444400d4ba5b229_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:b8606468aabd58cc015ee48aadbe7d69bf2ceedf25466c201303fdeb01aeedb0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:e45ef752eeafd85f33f0b87e955055b701522a99c01b5b1662997015cda0e236_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:07502045ec816b13a5aab5f5bcdf8c50242a2b8acbd15e3fa2dbb2faa25d2ed3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:104cfeb03d0b29b7e76516aa3ac8072366efeef5c136b68f7c3e8e0ad5ce1b96_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:e3445247fb19830ca4840fc26918d1154d53e1ae735d139473fe470db09a3efe_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:fa831832da15a85b49d52812220f3e6de82793461016cc659577113c0a5a0a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:22d2a996d18d00f5985f381e395b33186c2af759fba010bec0cc9f3120be3d3a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:51b926dc40fa8abe32f1a31f419d6e38d2ac322dc5973650bf0326afd841edd7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c86653f45ed8c480589f2d3cde84e1de45e23dbdeb7dcc398d5f0121ebc9215f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:dbe55cb7c87224ae10d5b157ef5e66a4ffe4788bfb134a3db47d2c1bceab4eec_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:0815b6568f3c2df6d86aa70458a3037d0251f58a673244f13defcfa9053d4019_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:2fc1ac0ac7950482cc4ee05aea133af511ebfcfbe45e0fa3d13f33c983a1a75a_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:48d38b946e601b8bfebe7fac00d538f01b6e565f01f76681059af7001d1a42a6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:81b31ada806558c18afb7bfcdaf1bc74ae92245e2f42aade9d80c59be2fa9a4c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:3b69bad711b3358fa22546c193d0b7d15c96c1b0c445b36da1d426695516634d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:72514aafb15a0988ec5d65cd01a90bd0c58010cce32af69c3d42b4d3a051a892_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:aa964bc0245cd01f2077b2f28567048ccb638cb899eefa66383dbcc2d53bcf3d_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:affbb00a938b6306fc357de5f5b5b48c1bc493a280b9db94cc0a5d545337934f_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:18c24d419df62a0eea1661c1ee045d90c0af6b9b1b026db79ecb194eb90da729_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b2d8de5fe912b7310f3101c2643ef11dbcbbf1ce9c615bd08ed6b51d33e1524c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ce6f63545309f77de13631a75d9fa3e3060b053cb38eac4c5c673bfe2a41c772_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f4927579a55325aff443a687b205a5bc501cd76c4456eb5cb040ed7069b896e8_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:22b1c051472b80f6d31e528852f46a2655cd98ab5034c17e7410fe7ff98038e7_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4f3bef1750177e00106442a17752a974e3a811941a6ea7657bd092a9dbf87706_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:873e89fc2d9e078c19de3ee06a6a7003094666483c22c33ad8f6c6523748af47_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:e5ffecfc7ded3de6e1d75de519cf97d4cf15ee28381898c3316eb2cc7fc05f5f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:4f7f8515509882b36a95c109fb5372de195bf28924d5bce0ddfe025f71d597b3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:94b883cd401a08efc1cffcdb0d72637066662dbbb87ea333fec50e04398df716_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d7a5a53e94a0c5f871c01081b472d2973b7740a05b15dae7cafaeef793790a7a_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f920481f708996edbc4ddc82bda2ea6c184a6adca21bd3d258ce0a5034318b56_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:1df9a040f6eaacaca9dfdabed3de15fc7a10bcb0d7cdb12fb64db008a3a87d55_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:57466b1054122ae9d616104cd3c41f8d3c1a3c510e7cc2578923ee3daaa8060c_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:598bbc8b366f87d23ff4e62a2144adb90b6ef302b4e7efe7651b3a2a7bfa5858_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:de654aef03a61d18db6b5806d0397a2ea913f001341c0f71d0048bbded160990_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5cfefcf34e2b6aaa3007aa6e23833ec6bf807fcc917068fb20dd2d24ad928ebc_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8dba2033ba3161d00121961cdb86a5d4d96c05a873b9ccb6b1492a0e6e3d63b4_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:acd380102a9470c92bf5579445548ec59f506a8357638e528ebde1486d7d2f7a_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ed3dda6f99cb789b2fcd00768a8992fdaefd66eedc13091b4ec71636ae45180f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0250bc715e7a879518e5933678bdfe7a9ea79524fb54bbc21468bb38b87910c6_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4e802bcd67c6d552fd4303103c098f8cd63b118d5aaf5fe518132bf7d16c210e_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d75706da01899800ac1f1f3b2b9e2eea4d2635e9d0cf9a53a68a547e1d3e0ac3_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ef8495916e6317b146a3ddd007c29885eaafeabbb2bda08f56f1d11d1b459be1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:1508137ce628d456a5a50d966b399ce7a7aa5500af3a7cb4f077d9d65da59af1_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:2315962c0f8025b8edcc8e8a2a9ea48a44db9066a1fc49fcf822a9a72939c5a8_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:8e3dcc4a2f74a42942771078262499c65862021fa030114837f84501d5a9e452_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:a3cc1a59f847dd52355713b2dff429d435e387841a942544069e00677216e727_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5c3f5d6f40bbf49f396cfb37bc7db44663e6d57d84d6aaf76d4beaf4c9dde652_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a50666e44e11d4babf1b2a4bc223a46dafea5f6e38d366bb36c8fff1a985638_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:bc76118c296d9864dbd13d0759e3dd564ea969c55e5c7bd0ff48531b0665b204_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:ccd7fca68979a061243fec3b4a0d477ebd6b01e31d6b50b9ca775f8a33516978_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:093fdac33650bc2d1d136024d0082ca6d527319c49372e7dcc62a01048ad8265_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2d21aab8de8ba00af7049f5cc1150f341c20b9c4f4607a9ce12bf898791318ef_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a74a7e175474586c81ecd58e9858b5ce68930b2926ae164dc94bdc42746edf5f_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:b2c522e77061272aec9209b53474f1522239b114c62033600491fe5c7343207b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:1296546277a1a00386e6bd0364e8e65f54d2a57b4aa2c18cebf5b46d5ebd8943_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:202cbd3a192f28455f31469167219ca8a9a22500c81078c4479c2eb8db974dd0_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:46fa2c55e2535677a4778cc17703a6b13e3db1fcae3a91ad84cf1a2399d00618_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:8478f7c09aa3c63c576c3ae182bd4c8cd76f61ca992a02c3e995f0728f1125f2_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5fd6897e6417b9959ebdface7eef63b2d10893bd03a25ce8663779452891b643_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c300783c024c2b2b89f564e89226537af752e97b6d8851a22f925652f3af741c_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ce39757e08deeec88137165e0d9551f8ee2cd96b6e15db30df285cd117f0cc31_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:eb6b1ba6f319dc115fe3b669f4d1dd1aa886c967a8b0607acdb62e5b3cbb6c61_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14a1242a70933349653b197f67ed82ad44e6f15e538da82323c54e40475e105d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2c1f2ed482705bb63b0735a48c793c0c05c2cf7b8ef4f880fc94f5163dd10ce6_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4a6ef79ffa40e508257f84a88784b5facb0f3c08f029821b214a3547ed4fc01e_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:5a866383d9f4977b85ce3a46e4c3d05f6ad3bc3f46a3a3749ac3dda69c99fe0e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:8e727ff6fc10dca05724d0ef32facd52c714e41d32cbbdee66dd9a119d48a63c_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b67bc5198e5e716839d323b4f198d69a1f05fb6686200ec81fc3790c2f4040c3_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:b80db1eec52e300101e990f786491111660a6abc08247646b76d3e7814d5d39e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d4d40fb6beaf5e3bc9c9a5e0e50432c64d7fbcb01a2be3ce04a263d14ee28ccd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4de85fb645c49673a188cf16d9c5f60f6c22165f2c17d9d9575a261156895628_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e5daf53e758944f1bd73189320af6df8c73a1288990dbd9fab71617b417eec4_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:7e9cea4d99b8199f55c3568e7df4735e809434da82015a554ec30c31a21eda49_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:b2c33fa73936ff22062bfe1b223f4ec9cfd9262b583e2909f1b893fa886a91f3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:43c08b788b7685a00b7a3c2b42b9d84e321ae1a007eb283a67d89c64332728ad_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:854b5ffea55e0fba6c4670a3c7b4a5294109cdad00f4eec01c7324748abec404_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:bdf8bd3b7f1961eba158060680908bfc0bf77cba9773a47ce1f39a89be41a43b_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:dceaebb7604ee432f44939632f88d72d52abb3f2bfc4e175c8adcfdb5aca928d_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4f021c6ac93ab2867ecbf05920aa61ef498d00322dda77c93bd253b4b4804e8e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:6f99f95216c88a38b67b198f5e5dbb55275aac334bbd56ca9126de9bf93f2471_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:7ac4b491c48650651e774b0c4231d76c1815cee8dfe890960cb377705ad58118_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:a0a26d867f76d94a860711c0fc51eb9267cc4086bc696bc1367b941adc934398_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:22c0c70b69645c5e6a5630b6623aa857afbe753d4ea5151e86fd2ec88d67f886_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3c7531d2afacc243b442795102d961f9ec111d33409a09a31b7e9bed0a75d52f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:41a088ac743ca90308ba0738471fab5b7ba12c0d5a88c88aed12f19c5cf9ae3b_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:b4dba38a06b90ec9a88ba2541429cd19d2a03588944045a5c0c4c33988329d07_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:09caff77bc08c100f903b69998dd30347d79f0a0aed7ac245e3194838ecd4752_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:56333a348a639bebf9d6d2b1f4524bd274aa696ec73763deb668226e9e12d8e2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:6ae2fd22e8ca81684ffa10a3f549dd29c823661970b8bbd84a40f7255f58c979_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:78f90c81ddad11660c58c1fab0c5003cdbc22bd76bfb8dd0b5ff5bff1e01745e_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:6346b47545f668a23f2f02141291bcb30650a2fad1a56d97aae8b20baf986682_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c19d40c8de026714cd9a19bc5de7ea022e3ae9955b7b4299e9cbde69e92b780_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ad7e9c1a2236ba34da8f5349f1fa7b35fcea8981d9257af8fca0a1ecc4d5a61d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:df9ff018f6bd33041f426329cac6e14e4468282df52ee475b755d5d8710f56cd_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:287b38d7b3aa46678586893d851d97678a658d4f39296c1f3e1affeacab3853b_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:37e1500f9cc565c8f4535ac03ad3e90ce9e294b774ef41f424d6cea9d10ec2f0_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:6d60190c43b31caa8ca02f1f72ea9a8d9a3698cd3e0da4275eeb3366b11c1db0_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:8c0fb8a431c0bf8b237c9485f91fe03e15eae120233bae363dbfb8239631a7ea_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ce79b72cbf2efe3cc2fba42204727c131bcaa1960758d4b32aeb4caf70a0748_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2e1c9dfc53b85cfeb82e45d02096372250d6ea6c83cb31088a0fd9a451c6d392_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:68f36aa5c5366024fa29e5b9a4915acc4139208b9113a574384dd8140f7ae1a2_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:6a9b939d4d13a9a74e5083cb7684d50742020f1961720a346456e7431e592bf3_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:1521447f3d76f4ba1e4cb92bd166285c5c8c19eb2976334817e0118ea163ee3e_arm64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:5bd59b8e52e5af5a6c5946c383eaa762bbfa7b144b7b888172f14d10b5ad573f_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8aa0747c0ec6ba40947f6dd1464d56c5bfbc15225367cfb1ffc0a6fe65481c30_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:ade9141784f5c838a9c0125198ba84878f319827f38ddde98906754e316bae76_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:0a0bc45b8a6a284a762fb9f9a3b2a9025e62fcd3e9e0ac69a539089c474f25c2_s390x	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:83f554f65cc051c21f4a6779afac27abc4410b4aaa150a63b992dca529318d0d_amd64	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e5df66a9050e8856d2bc4eed3ca3b92895b7842b06d6dd1c93e32f999ccad1de_ppc64le	—	Workaround
Unresolved product id: multicluster engine for Kubernetes 2.1:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e89f1932aaabd42c5b7be791305a427f1fb811719296c1bddfac49edd771fa47_arm64	—	Workaround

Threats

Impact Important

CVE-2026-73267

A flaw was found in the clusterclaims-controller component of multicluster engine (MCE). A tenant with standard permissions to create and delete ClusterClaim resources can exploit this by manipulating the `spec.namespace` field. This allows the tenant to specify and delete any ManagedCluster, including the hub's local-cluster or other tenants' clusters, due to a missing ownership check. This vulnerability can lead to a denial of service by enabling unauthorized deletion of ManagedClusters.

7.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-602 - Client-Side Enforcement of Server-Side Security

Affected products

Fixed 4 products, the same list as for CVE-2026-73266

Known not affected 120 products, the same list as for CVE-2026-73266

Threats

Impact Important

CVE-2026-73268

A flaw was found in the cluster-curator-controller component of multicluster engine (MCE). A tenant with create or update permissions on ClusterCurator resources can inject an arbitrary Job specification. This is possible because the CreateJob() function does not validate user-controlled input when unmarshaling the spec.install.overrideJob raw extension. Successful exploitation allows the injected Job to run with the controller's elevated privileges, leading to arbitrary code execution and privilege escalation, potentially accessing cluster-wide secrets.

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-10059

Known not affected 120 products, the same list as for CVE-2026-10059

Threats

Impact Important

CVE-2026-73269

A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCurator resource with a specific naming convention, can trigger the creation of a cluster-scoped ClusterRoleBinding. This allows the user to escalate their privileges from namespace-local access to cluster-wide control. This privilege escalation grants broad permissions, including the ability to access and manipulate secrets, manage cluster actions, and delete hosted clusters or node pools.

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-269 - Improper Privilege Management

Affected products

Fixed 4 products, the same list as for CVE-2026-10059

Known not affected 120 products, the same list as for CVE-2026-10059

Threats

Impact Important

References

91 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:59557	self
https://access.redhat.com/security/cve/CVE-2024-45336	external
https://access.redhat.com/security/cve/CVE-2025-22866	external
https://access.redhat.com/security/cve/CVE-2026-10059	external
https://access.redhat.com/security/cve/CVE-2026-12143	external
https://access.redhat.com/security/cve/CVE-2026-19130	external
https://access.redhat.com/security/cve/CVE-2026-27145	external
https://access.redhat.com/security/cve/CVE-2026-35469	external
https://access.redhat.com/security/cve/CVE-2026-66794	external
https://access.redhat.com/security/cve/CVE-2026-66795	external
https://access.redhat.com/security/cve/CVE-2026-66804	external
https://access.redhat.com/security/cve/CVE-2026-73266	external
https://access.redhat.com/security/cve/CVE-2026-73267	external
https://access.redhat.com/security/cve/CVE-2026-73268	external
https://access.redhat.com/security/cve/CVE-2026-73269	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2024-45336	self
https://bugzilla.redhat.com/show_bug.cgi?id=2341751	external
https://www.cve.org/CVERecord?id=CVE-2024-45336	external
https://nvd.nist.gov/vuln/detail/CVE-2024-45336	external
https://github.com/golang/go/issues/70530	external
https://groups.google.com/g/golang-announce/c/sSa…	external
https://access.redhat.com/security/cve/CVE-2025-22866	self
https://bugzilla.redhat.com/show_bug.cgi?id=2344219	external
https://www.cve.org/CVERecord?id=CVE-2025-22866	external
https://nvd.nist.gov/vuln/detail/CVE-2025-22866	external
https://go.dev/cl/643735	external
https://go.dev/issue/71383	external
https://groups.google.com/g/golang-announce/c/xU1…	external
https://pkg.go.dev/vuln/GO-2025-3447	external
https://access.redhat.com/security/cve/CVE-2026-10059	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483187	external
https://www.cve.org/CVERecord?id=CVE-2026-10059	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10059	external
https://access.redhat.com/security/cve/CVE-2026-12143	self
https://bugzilla.redhat.com/show_bug.cgi?id=2488480	external
https://www.cve.org/CVERecord?id=CVE-2026-12143	external
https://nvd.nist.gov/vuln/detail/CVE-2026-12143	external
https://cwe.mitre.org/data/definitions/93.html	external
https://github.com/form-data/form-data/commit/641…	external
https://github.com/form-data/form-data/commit/be3…	external
https://github.com/form-data/form-data/commit/c71…	external
https://github.com/form-data/form-data/security/a…	external
https://html.spec.whatwg.org/multipage/form-contr…	external
https://www.npmjs.com/package/form-data	external
https://access.redhat.com/security/cve/CVE-2026-19130	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512105	external
https://www.cve.org/CVERecord?id=CVE-2026-19130	external
https://nvd.nist.gov/vuln/detail/CVE-2026-19130	external
https://access.redhat.com/security/cve/CVE-2026-27145	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484207	external
https://www.cve.org/CVERecord?id=CVE-2026-27145	external
https://nvd.nist.gov/vuln/detail/CVE-2026-27145	external
https://go.dev/cl/783621	external
https://go.dev/issue/79694	external
https://groups.google.com/g/golang-announce/c/tKs…	external
https://pkg.go.dev/vuln/GO-2026-5037	external
https://access.redhat.com/security/cve/CVE-2026-35469	self
https://bugzilla.redhat.com/show_bug.cgi?id=2457729	external
https://www.cve.org/CVERecord?id=CVE-2026-35469	external
https://nvd.nist.gov/vuln/detail/CVE-2026-35469	external
https://access.redhat.com/security/cve/CVE-2026-66794	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507539	external
https://www.cve.org/CVERecord?id=CVE-2026-66794	external
https://nvd.nist.gov/vuln/detail/CVE-2026-66794	external
https://access.redhat.com/security/cve/CVE-2026-66795	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507540	external
https://www.cve.org/CVERecord?id=CVE-2026-66795	external
https://nvd.nist.gov/vuln/detail/CVE-2026-66795	external
https://access.redhat.com/security/cve/CVE-2026-66804	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508665	external
https://www.cve.org/CVERecord?id=CVE-2026-66804	external
https://nvd.nist.gov/vuln/detail/CVE-2026-66804	external
https://issues.redhat.com/browse/ACM-38691	external
https://access.redhat.com/security/cve/CVE-2026-73266	self
https://bugzilla.redhat.com/show_bug.cgi?id=2514217	external
https://www.cve.org/CVERecord?id=CVE-2026-73266	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73266	external
https://access.redhat.com/security/cve/CVE-2026-73267	self
https://bugzilla.redhat.com/show_bug.cgi?id=2514218	external
https://www.cve.org/CVERecord?id=CVE-2026-73267	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73267	external
https://access.redhat.com/security/cve/CVE-2026-73268	self
https://bugzilla.redhat.com/show_bug.cgi?id=2514219	external
https://www.cve.org/CVERecord?id=CVE-2026-73268	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73268	external
https://access.redhat.com/security/cve/CVE-2026-73269	self
https://bugzilla.redhat.com/show_bug.cgi?id=2514220	external
https://www.cve.org/CVERecord?id=CVE-2026-73269	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73269	external

Acknowledgments

North Echo Security Research Christopher Lusk

JSON

To clipboard

Loading 1.5 MB of JSON…

CVE-2024-45336 (GCVE-0-2024-45336)

Vulnerability from cvelistv5 – Published: 2025-01-28 01:03 – Updated: 2025-09-18 18:41

Title

Sensitive headers incorrectly sent after cross-domain redirect in net/http

Summary

The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however, the sensitive headers would be restored. For example, a chain of redirects from a.com/, to b.com/1, and finally to b.com/2 would incorrectly send the Authorization header to b.com/2.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-28 14:56 UTC

CWE

CWE-201 - Insertion of Sensitive Information Into Sent Data

Assigner

Go Google root

References

6 references

URL	Tags
https://go.dev/cl/643100
https://go.dev/issue/70530
https://groups.google.com/g/golang-dev/c/CAWXhan3…
https://groups.google.com/g/golang-dev/c/bG8cv1mu…
https://pkg.go.dev/vuln/GO-2025-3420
https://security.netapp.com/advisory/ntap-2025022…

Impacted products

1 product

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.22.11 (semver) Affected: 1.23.0-0 , < 1.23.5 (semver) Affected: 1.24.0-0 , < 1.24.0-rc.2 (semver)

Credits

Kyle Seely

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-45336",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-28T14:56:59.058895Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-28T15:16:38.044Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-02-21T18:03:31.299Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250221-0003/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "Client.do"
            },
            {
              "name": "Client.makeHeadersCopier"
            },
            {
              "name": "shouldCopyHeaderOnRedirect"
            },
            {
              "name": "Client.Do"
            },
            {
              "name": "Client.Get"
            },
            {
              "name": "Client.Head"
            },
            {
              "name": "Client.Post"
            },
            {
              "name": "Client.PostForm"
            },
            {
              "name": "Get"
            },
            {
              "name": "Head"
            },
            {
              "name": "Post"
            },
            {
              "name": "PostForm"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.22.11",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.5",
              "status": "affected",
              "version": "1.23.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.0-rc.2",
              "status": "affected",
              "version": "1.24.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Kyle Seely"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however, the sensitive headers would be restored. For example, a chain of redirects from a.com/, to b.com/1, and finally to b.com/2 would incorrectly send the Authorization header to b.com/2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-201: Insertion of Sensitive Information Into Sent Data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-18T18:41:11.116Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/643100"
        },
        {
          "url": "https://go.dev/issue/70530"
        },
        {
          "url": "https://groups.google.com/g/golang-dev/c/CAWXhan3Jww/m/bk9LAa-lCgAJ"
        },
        {
          "url": "https://groups.google.com/g/golang-dev/c/bG8cv1muIBM/m/G461hA6lCgAJ"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2025-3420"
        }
      ],
      "title": "Sensitive headers incorrectly sent after cross-domain redirect in net/http"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2024-45336",
    "datePublished": "2025-01-28T01:03:24.869Z",
    "dateReserved": "2024-08-27T19:41:58.555Z",
    "dateUpdated": "2025-09-18T18:41:11.116Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-22866 (GCVE-0-2025-22866)

Vulnerability from cvelistv5 – Published: 2025-02-06 16:54 – Updated: 2025-02-21 18:03

Title

Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

Summary

Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.

Severity

4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-10 20:40 UTC

CWE

CWE-208 - Observable Timing Discrepancy

Assigner

Go Google root

References

5 references

URL	Tags
https://go.dev/cl/643735
https://go.dev/issue/71383
https://groups.google.com/g/golang-announce/c/xU1…
https://pkg.go.dev/vuln/GO-2025-3447
https://security.netapp.com/advisory/ntap-2025022…

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/internal/nistec	Affected: 0 , < 1.22.12 (semver) Affected: 1.23.0-0 , < 1.23.6 (semver) Affected: 1.24.0-0 , < 1.24.0-rc.3 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-22866",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-10T20:40:17.232803Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-11T14:47:25.778Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-02-21T18:03:36.215Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250221-0002/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/internal/nistec",
          "product": "crypto/internal/nistec",
          "programRoutines": [
            {
              "name": "p256NegCond"
            },
            {
              "name": "P256Point.ScalarBaseMult"
            },
            {
              "name": "P256Point.ScalarMult"
            },
            {
              "name": "P256Point.SetBytes"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.22.12",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.6",
              "status": "affected",
              "version": "1.23.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.0-rc.3",
              "status": "affected",
              "version": "1.24.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-208: Observable Timing Discrepancy",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-06T16:54:10.252Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/643735"
        },
        {
          "url": "https://go.dev/issue/71383"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/xU1ZCHUZw3k"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2025-3447"
        }
      ],
      "title": "Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2025-22866",
    "datePublished": "2025-02-06T16:54:10.252Z",
    "dateReserved": "2025-01-08T19:11:42.834Z",
    "dateUpdated": "2025-02-21T18:03:36.215Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-10059 (GCVE-0-2026-10059)

Vulnerability from cvelistv5 – Published: 2026-08-05 08:54 – Updated: 2026-09-08 12:18

Title

Cluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via clustercurator serviceaccount token

Summary

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-05 14:21 UTC

CWE

CWE-266 - Incorrect Privilege Assignment

Assigner

redhat redhat root

References

7 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:59556	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59557	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59558	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59559	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59579	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-10059	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2483187	issue-trackingx_refsource_REDHAT

Impacted products

5 products

Vendor	Product	Version
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1787201612 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787238383 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787264185 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259011 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787201646 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9

Date Public

2026-08-05 08:35

Credits

Red Hat would like to thank Christopher Lusk (North Echo Security Research) for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-10059",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-05T14:21:58.044319Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-05T14:26:49.274Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.10::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787201612",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.11::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.11",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787238383",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.6::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787264185",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787259011",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.9::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787201646",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Christopher Lusk (North Echo Security Research) for reporting this issue."
        }
      ],
      "datePublic": "2026-08-05T08:35:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this vulnerability by creating a namespaced ClusterCurator. This action inadvertently grants the tenant administrator the ability to mint a token for a ServiceAccount with cluster-wide administrative authority. This leads to a privilege escalation, allowing the tenant administrator to gain full control over the cluster."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T12:18:44.040Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:59556",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59556"
        },
        {
          "name": "RHSA-2026:59557",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59557"
        },
        {
          "name": "RHSA-2026:59558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59558"
        },
        {
          "name": "RHSA-2026:59559",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59559"
        },
        {
          "name": "RHSA-2026:59579",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59579"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-10059"
        },
        {
          "name": "RHBZ#2483187",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483187"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-06T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-05T08:35:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Cluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via clustercurator serviceaccount token",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-266: Incorrect Privilege Assignment"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-10059",
    "datePublished": "2026-08-05T08:54:51.726Z",
    "dateReserved": "2026-05-29T08:14:22.495Z",
    "dateUpdated": "2026-09-08T12:18:44.040Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12143 (GCVE-0-2026-12143)

Vulnerability from cvelistv5 – Published: 2026-06-12 18:01 – Updated: 2026-09-11 12:08

Title

form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

Summary

form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-12 19:04 UTC

CWE

CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')

Assigner

harborist redhat root

References

65 references

URL	Tags
https://github.com/form-data/form-data/security/a…	vendor-advisory
https://github.com/form-data/form-data/commit/641…	patch
https://github.com/form-data/form-data/commit/be3…	patch
https://github.com/form-data/form-data/commit/c71…	patch
https://www.npmjs.com/package/form-data	product
https://cwe.mitre.org/data/definitions/93.html	technical-description
https://html.spec.whatwg.org/multipage/form-contr…	technical-description
https://access.redhat.com/security/cve/CVE-2026-12143	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2488480	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:59136	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34342	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57590	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66545	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66488	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60390	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60388	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60389	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60391	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36625	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56338	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66003	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59155	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59153	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41951	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36754	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41929	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63047	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44263	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57545	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60446	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44267	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57801	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60477	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48693	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54770	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48124	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62260	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33155	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33163	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33173	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33183	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56431	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56366	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57013	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41031	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42146	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43052	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63373	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63355	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59556	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59557	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59579	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59558	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59559	vendor-advisoryx_refsource_REDHAT

Impacted products

167 products

Vendor	Product	Version
form-data	form-data	Affected: 0 , < 2.5.6 (semver) Affected: 3.0.0 , < 3.0.5 (semver) Affected: 4.0.0 , < 4.0.6 (semver)
Red Hat	Cryostat 4 on RHEL 9	Unaffected: 4.2.0-13 , < * (rpm) cpe:/a:redhat:cryostat:4::el9
Red Hat	Red Hat AMQ Broker 7.13.6	cpe:/a:redhat:amq_broker:7.13
Red Hat	Red Hat AMQ Broker 7.14.1	cpe:/a:redhat:amq_broker:7.14
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:2.6.13-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Data Grid 8.6.2	cpe:/a:redhat:jboss_data_grid:8
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.1.2-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840519 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839981 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839193 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838753 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839279 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840539 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782841925 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782844225 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839658 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838476 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839996 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839494 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1787079364 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787065052 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787264250 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259048 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787079359 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787687062 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787339249 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1787339248 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1787341780 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787339213 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1783357116 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1783357140 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Ansible Automation Platform 2.1	Unaffected: 1787047114 , < * (rpm) cpe:/a:redhat:ansible_portal:2.1
Red Hat	Red Hat Ansible Automation Platform 2.2	Unaffected: 1788943531 , < * (rpm) cpe:/a:redhat:ansible_portal:2.2::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1787219751 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1787218409 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Developer Hub 1.10	Unaffected: 1783448184 , < * (rpm) cpe:/a:redhat:rhdh:1.10::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1784210921 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Migration Toolkit 1.8	Unaffected: 1783690532 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat Migration Toolkit for Applications 8.1	Unaffected: 1785169013 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.1::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787347991 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250508 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251550 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611759 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251250 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250617 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1788318661 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1784724699 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1787080892 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1787736396 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1784713741 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1787014197 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1787590390 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1785230147 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1786607915 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1786586789 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705347 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706101 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705558 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705646 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706138 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705741 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705777 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705802 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705938 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706577 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706125 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706177 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706188 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706679 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706357 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706612 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706644 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706659 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706880 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786701839 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786701555 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702052 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702559 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702713 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702264 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702448 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702276 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702440 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702315 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786703071 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702563 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702636 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702623 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786703137 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702716 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702872 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702949 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786702917 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.19	Unaffected: 1786703143 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627460 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786626399 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628235 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627106 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629761 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627559 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786687918 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629478 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628142 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786631508 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628053 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627382 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627430 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629076 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786627469 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786644072 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786688215 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628340 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628623 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786632256 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786628935 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat Openshift Data Foundation 4.20	Unaffected: 1786629548 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1785245777 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1784737150 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.30	Unaffected: 1787762793 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.30::el9
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1781937133 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1782287580 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782201894 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782201833 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782201696 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782201537 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782201851 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782201812 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782231869 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782201466 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1783750447 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1783751865 , < * (rpm) Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1784351966 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1783955846 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1784125838 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Satellite 6.18	Unaffected: 1788322243 , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1788260941 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Migration Toolkit for Applications 8	cpe:/a:redhat:migration_toolkit_applications:8
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	Node HealthCheck Operator	cpe:/a:redhat:workload_availability_nhc:0
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat build of Apache Camel for Spring Boot 4	cpe:/a:redhat:camel_spring_boot:4
Red Hat	Red Hat build of Apache Camel - HawtIO 4	cpe:/a:redhat:apache_camel_hawtio:4
Red Hat	Red Hat build of Apicurio Registry 3	cpe:/a:redhat:apicurio_registry:3
Red Hat	Red Hat Build of Podman Desktop	cpe:/a:redhat:podman_desktop:1
Red Hat	Red Hat Build of Podman Desktop - Tech Preview	cpe:/a:redhat:podman_desktop:0
Red Hat	Red Hat Discovery 2	cpe:/a:redhat:discovery:2::el9
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat Fuse 7	cpe:/a:redhat:jboss_fuse:7
Red Hat	Red Hat Hardened Images	cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat JBoss Enterprise Application Platform 7	cpe:/a:redhat:jboss_enterprise_application_platform:7
Red Hat	Red Hat JBoss Enterprise Application Platform 8	cpe:/a:redhat:jboss_enterprise_application_platform:8
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	cpe:/a:redhat:jbosseapxp
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Trusted Artifact Signer	cpe:/a:redhat:trusted_artifact_signer:1
Red Hat	Red Hat Trusted Profile Analyzer	cpe:/a:redhat:trusted_profile_analyzer:2

Credits

yueyueL (https://github.com/yueyueL) LJHarb (https://github.com/LJHarb) LJHarb (https://github.com/LJHarb)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-12143",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-12T19:04:40.604029Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-12T19:04:44.024Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cryostat/cryostat-openshift-console-plugin-rhel9",
            "product": "Cryostat 4 on RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.2.0-13",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7.13"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Red Hat AMQ Broker 7.13.6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7.14"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Red Hat AMQ Broker 7.14.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-platform-ui",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.6.13-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_data_grid:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Red Hat Data Grid 8.6.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-podman-desktop",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.2-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840519",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839981",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839193",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839279",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840539",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782841925",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782844225",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839658",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838476",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839996",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839494",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787079364",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787065052",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787264250",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259048",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787079359",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787687062",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787339249",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787339248",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787341780",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787339213",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783357116",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783357140",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2.1"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/automation-portal",
            "product": "Red Hat Ansible Automation Platform 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787047114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788943531",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/gateway-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787219751",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/gateway-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787218409",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783448184",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784210921",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-ui-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783690532",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-ui-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785169013",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-dashboard-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787347991",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-automl-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251550",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611759",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251250",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250617",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788318661",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784724699",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787080892",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787736396",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784713741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787014197",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787590390",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785230147",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786607915",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786586789",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706101",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705558",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706138",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705802",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705938",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706577",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706125",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706177",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706188",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706679",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706357",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706612",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706659",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706880",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786701839",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786701555",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702052",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702713",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702264",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702448",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702276",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702440",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702315",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703071",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702563",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702636",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702623",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703137",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702716",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702872",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702949",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786702917",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786703143",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627460",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786626399",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628235",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627106",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629761",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786687918",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629478",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628142",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786631508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628053",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627382",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627430",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629076",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786627469",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786644072",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786688215",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628340",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628623",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786632256",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786628935",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786629548",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/code-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785245777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/dashboard-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784737150",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.30::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/code-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.30",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787762793",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781937133",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782287580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201894",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201833",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201696",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201851",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782231869",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201466",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783750447",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783751865",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784353904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784125838",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-host-inventory-frontend-rhel9",
            "product": "Red Hat Satellite 6.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788322243",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-host-inventory-frontend-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788260941",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat-openshift-console-plugin-npm",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mta/mta-ui-rhel8",
            "product": "Migration Toolkit for Applications 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-console-plugin-pf5-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-console-plugin-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-must-gather-rhel9",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-operator-bundle",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel9-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-remediation-console-rhel8",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-console-plugin-pf5-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-operator-bundle",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9-operator",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp21/system",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp22/system",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/system-rhel7",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/system-rhel8",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/system-rhel9",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform/automation-dashboard-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-hub",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "python3x-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:camel_spring_boot:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Red Hat build of Apache Camel for Spring Boot 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apache_camel_hawtio:4"
            ],
            "defaultStatus": "affected",
            "packageName": "form-data",
            "product": "Red Hat build of Apache Camel - HawtIO 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apicurio_registry:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "apicurio/apicurio-registry-ui-rhel8",
            "product": "Red Hat build of Apicurio Registry 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apicurio_registry:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "apicurio/apicurio-registry-ui-rhel9",
            "product": "Red Hat build of Apicurio Registry 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-podman-desktop.git",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdesktop/rh-podman-desktop-ext-rhel-rhel10",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdesktop/rh-podman-desktop-ext-sandbox-rhel10",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:discovery:2::el9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "discovery/discovery-ui-rhel9",
            "product": "Red Hat Discovery 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "gjs",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "subscription-manager",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "cockpit-composer",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "dotnet5.0-build-reference-packages",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "dotnet8.0",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mozjs60",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "pcs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "subscription-manager",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "firefox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "gjs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "pcs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "thunderbird",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gaudi-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/disk-image-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "unknown",
            "packageName": "form-data",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "dotnet8.0",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "yarnpkg",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_application_platform:7"
            ],
            "defaultStatus": "affected",
            "packageName": "form-data",
            "product": "Red Hat JBoss Enterprise Application Platform 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_application_platform:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Red Hat JBoss Enterprise Application Platform 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jbosseapxp"
            ],
            "defaultStatus": "unaffected",
            "packageName": "form-data",
            "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel9",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-advisor-frontend-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-remediations-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vulnerability-frontend-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rhtas-console-ui-rhel9",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_profile_analyzer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
            "product": "Red Hat Trusted Profile Analyzer",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-12T18:01:30.362Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-93",
                "description": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:08:59.965Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-12143"
          },
          {
            "name": "RHBZ#2488480",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12143.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59136"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34342"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57590"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66545"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66488"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60390"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60388"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60389"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60391"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36625"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56338"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66003"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59155"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59153"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41951"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36754"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41929"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50300"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63047"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44263"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57545"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60446"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44267"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57801"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60477"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48693"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54770"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48124"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62260"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33155"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33160"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33163"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33173"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33183"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56431"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56366"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57013"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41031"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42146"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43052"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63373"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63355"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59556"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59557"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59579"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59558"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59559"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:59136: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57590: Red Hat Enterprise Linux Extensions Channel (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66545: Red Hat AMQ Broker 7.13.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66488: Red Hat AMQ Broker 7.14.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60390: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60388: Red Hat Advanced Cluster Management for Kubernetes 2.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60389: Red Hat Advanced Cluster Management for Kubernetes 2.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60391: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56338: Red Hat Ansible Automation Platform 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66003: Red Hat Ansible Automation Platform 2.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59155: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59153: Red Hat Ansible Automation Platform 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41951: Red Hat Data Grid 8.6.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41929: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63047: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44263: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57545: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60446: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44267: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57801: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60477: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48693: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54770: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48124: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62260: Red Hat OpenShift Dev Spaces 3.30"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56366: Red Hat Openshift Data Foundation 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57013: Red Hat Openshift Data Foundation 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41031: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42146: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43052: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40262: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63373: Red Hat Satellite 6.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63355: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59556: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59557: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59579: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59558: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59559: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-12T19:00:57.360Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-12T18:01:30.362Z",
            "value": "Made public."
          }
        ],
        "title": "form-data: form-data: Form field override via CRLF injection",
        "workarounds": [
          {
            "lang": "en",
            "value": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://www.npmjs.com/package/form-data",
          "defaultStatus": "unaffected",
          "packageName": "form-data",
          "product": "form-data",
          "programFiles": [
            "lib/form_data.js"
          ],
          "repo": "https://github.com/form-data/form-data",
          "vendor": "form-data",
          "versions": [
            {
              "lessThan": "2.5.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.0.5",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "4.0.6",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "yueyueL (https://github.com/yueyueL)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "LJHarb (https://github.com/LJHarb)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "LJHarb (https://github.com/LJHarb)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eform-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `\"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.\u003c/p\u003e"
            }
          ],
          "value": "form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `\"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "Application uses attacker-controlled input as a multipart field name or filename and forwards the generated request to a trusted backend."
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-93",
              "description": "CWE-93: Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-12T18:01:30.362Z",
        "orgId": "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
        "shortName": "harborist"
      },
      "references": [
        {
          "name": "GHSA-hmw2-7cc7-3qxx",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
        },
        {
          "name": "Fix commit (4.0.6)",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
        },
        {
          "name": "Fix commit (3.0.5)",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
        },
        {
          "name": "Fix commit (2.5.6)",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
        },
        {
          "name": "npm: form-data",
          "tags": [
            "product"
          ],
          "url": "https://www.npmjs.com/package/form-data"
        },
        {
          "name": "CWE-93",
          "tags": [
            "technical-description"
          ],
          "url": "https://cwe.mitre.org/data/definitions/93.html"
        },
        {
          "name": "WHATWG HTML: multipart/form-data encoding algorithm",
          "tags": [
            "technical-description"
          ],
          "url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
        }
      ],
      "title": "form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
    "assignerShortName": "harborist",
    "cveId": "CVE-2026-12143",
    "datePublished": "2026-06-12T18:01:30.362Z",
    "dateReserved": "2026-06-12T17:33:29.185Z",
    "dateUpdated": "2026-09-11T12:08:59.965Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-19130 (GCVE-0-2026-19130)

Vulnerability from cvelistv5 – Published: 2026-08-12 20:46 – Updated: 2026-09-08 12:17

Title

Provider-credential-controller: provider-credential-controller: cross-namespace credential propagation via attacker-controlled copiedfrom labels bypasses authorization

Summary

Severity

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 22:13 UTC

CWE

CWE-639 - Authorization Bypass Through User-Controlled Key

Assigner

redhat redhat root

References

8 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:59556	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59557	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59558	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59559	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59579	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59593	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-19130	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2512105	issue-trackingx_refsource_REDHAT

Impacted products

6 products

Vendor	Product	Version
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1787176886 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787239595 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786664288 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787260821 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259099 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787176716 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9

Date Public

2026-08-12 18:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-19130",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T22:13:54.758866Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T22:14:05.851Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.10::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/provider-credential-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787176886",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.11::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/provider-credential-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.11",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787239595",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/provider-credential-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1786664288",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.6::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/provider-credential-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787260821",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/provider-credential-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787259099",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.9::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/provider-credential-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787176716",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "datePublic": "2026-08-12T18:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the provider-credential-controller component of multicluster-engine (MCE). An attacker with specific permissions on the hub cluster, and knowledge of a prior credential value, could exploit an authorization bypass vulnerability. By manipulating `copiedFrom` labels, the attacker could intercept newly rotated provider credentials, leading to unauthorized information disclosure. This allows access to sensitive credentials that should otherwise be protected."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-639",
              "description": "Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T12:17:53.816Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:59556",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59556"
        },
        {
          "name": "RHSA-2026:59557",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59557"
        },
        {
          "name": "RHSA-2026:59558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59558"
        },
        {
          "name": "RHSA-2026:59559",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59559"
        },
        {
          "name": "RHSA-2026:59579",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59579"
        },
        {
          "name": "RHSA-2026:59593",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59593"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-19130"
        },
        {
          "name": "RHBZ#2512105",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512105"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-23T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-12T18:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Provider-credential-controller: provider-credential-controller: cross-namespace credential propagation via attacker-controlled copiedfrom labels bypasses authorization",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-639: Authorization Bypass Through User-Controlled Key"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-19130",
    "datePublished": "2026-08-12T20:46:21.305Z",
    "dateReserved": "2026-08-06T15:55:10.000Z",
    "dateUpdated": "2026-09-08T12:17:53.816Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-27145 (GCVE-0-2026-27145)

Vulnerability from cvelistv5 – Published: 2026-06-02 22:01 – Updated: 2026-09-11 12:09

Title

Inefficient candidate hostname parsing in crypto/x509

Summary

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-04 12:34 UTC

CWE

CWE-407 - Inefficient Algorithmic Complexity
CWE-606 - Unchecked Input for Loop Condition

Assigner

Go Google root

References

98 references

URL	Tags
https://go.dev/cl/783621
https://go.dev/issue/79694
https://groups.google.com/g/golang-announce/c/tKs…
https://pkg.go.dev/vuln/GO-2026-5037
https://access.redhat.com/security/cve/CVE-2026-27145	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2484207	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:42079	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42080	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53416	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57482	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42082	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42150	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42240	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49703	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49702	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53413	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53374	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54168	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51187	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29980	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35832	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34357	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39005	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42946	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39573	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:38995	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41930	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61253	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60354	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57649	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60315	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53415	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54401	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29981	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34359	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39879	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36317	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61314	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54500	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41030	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44622	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47149	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53530	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:52946	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51057	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47737	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60390	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60388	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54427	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60391	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60386	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42142	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33574	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23264	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54441	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42644	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36648	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41036	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60025	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57488	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54603	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49705	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49729	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49744	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49765	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49770	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50205	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36797	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42047	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42050	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42051	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42049	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55899	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54435	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54525	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59556	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59593	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59557	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54432	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59579	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59558	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47735	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59559	vendor-advisoryx_refsource_REDHAT

Impacted products

229 products

Vendor	Product	Version
Go standard library	crypto/x509	Affected: 0 , < 1.25.11 (semver) Affected: 1.26.0-0 , < 1.26.4 (semver)
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:1.6.7-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:1.6.7-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el10
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.26.4-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.152.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.9.27-7.el10_2.2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 1:0.3.8-6.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.4.9.2-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.2.10-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.0-4.el10_2.5 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.1-2.el10_2.3 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.26.5-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.26.1-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.4.7-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 1:0.3.2-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.152.1-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.2.3-6.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:1.4.0-8.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260710105056.a3795dee , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 1:0.2.5-9.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.26.4-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.152.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:1.22.2-7.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:0.2.7-8.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:0.2.2-1.el9_2.4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:0.152.1-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 1:0.2.4-9.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:1.26.5-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:0.152.1-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 1:0.2.7-1.el9_6.5 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:0.23.0-5.rhaos4.18.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenStack Platform 16.2	Unaffected: 0:0.2.1-1.1.el8ost , < * (rpm) cpe:/a:redhat:openstack:16.2::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 8	Unaffected: 0:0.0.4-1.el8sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el9
Red Hat	Red Hat Satellite 6.17 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.17::el9
Red Hat	Red Hat Satellite 6.18 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Streams for Apache Kafka 3.2.1	Unaffected: danielqsj-kafka_exporter , < * (rpm) cpe:/a:redhat:amq_streams:3.2::el9
Red Hat	Cert Manager support for Red Hat OpenShift release 1.19	Unaffected: 1786613805 , < * (rpm) cpe:/a:redhat:cert_manager:1.19::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1787593946 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Compliance Operator 1	Unaffected: 1786380082 , < * (rpm) cpe:/a:redhat:openshift_compliance_operator:1::el9
Red Hat	external secrets operator for Red Hat OpenShift 1.1	Unaffected: 1786614676 , < * (rpm) cpe:/a:redhat:external_secrets_operator:1.1::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1786549223 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1787201612 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1786764622 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1787176886 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911941 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911952 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911945 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786912006 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911973 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911950 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911984 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786907276 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787238383 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787239116 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787239595 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786577950 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786750700 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786983362 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786664288 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787259112 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787264185 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787259740 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787260821 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784737366 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784738758 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784677239 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259015 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259059 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259011 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259016 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787258993 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259044 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259047 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259108 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259099 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259126 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259114 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259113 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787195995 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787201646 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1786764601 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787176716 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Multicluster Global Hub 1.4.5	Unaffected: 1784061472 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.4::el9
Red Hat	Multicluster Global Hub 1.6.5	Unaffected: 1784152046 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.6::el9
Red Hat	Multicluster Global Hub 1.7.0	Unaffected: 1784768332 , < * (rpm) Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9
Red Hat	Multicluster Global Hub 1.8.0	Unaffected: 1785763319 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.8::el9
Red Hat	OpenShift API for Data Protection 1.5	Unaffected: 1788860461 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.5::el9
Red Hat	OpenShift Developer Tools and Services 1.6.3	Unaffected: 1784727697 , < * (rpm) cpe:/a:redhat:source_to_image:1.6::el8
Red Hat	OpenShift Developer Tools and Services 1.6.3	Unaffected: 1784728036 , < * (rpm) cpe:/a:redhat:source_to_image:1.6::el8
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787260689 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787262214 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787260663 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787263584 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784677172 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784638644 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784590741 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787259106 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787259284 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787259310 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787263693 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1787183407 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1786976940 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1787172840 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1787170830 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1786547792 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1786547807 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1786549537 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787252179 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787242135 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787242105 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787242321 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787243221 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787242131 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787242099 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787242108 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788105072 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1783917963 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1782767215 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Hardened Images	Unaffected: 1.25.11-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 1.26.4-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Lightspeed (formerly Insights) for Runtimes 1.0	Unaffected: 1786483782 , < * (rpm) cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1784004914 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057868 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1784121108 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1783612119 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1787554347 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1786754425 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1786526139 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1785704636 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1785704547 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1784885742 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1784885559 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1784908682 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1784917979 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1784885281 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1784885133 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1784953556 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1784918113 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1784921753 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1784921772 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1784953743 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1784918117 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1784885810 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1784885681 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1784908639 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1785316150 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.4	Unaffected: 1785131046 , < * (rpm) cpe:/a:redhat:service_mesh:3.4::el9
Red Hat	Red Hat OpenShift Service Mesh 3.4	Unaffected: 1785131063 , < * (rpm) cpe:/a:redhat:service_mesh:3.4::el9
Red Hat	Red Hat OpenShift Service Mesh 3.4	Unaffected: 1785131291 , < * (rpm) cpe:/a:redhat:service_mesh:3.4::el9
Red Hat	Red Hat OpenShift Service Mesh 3.4	Unaffected: 1785317214 , < * (rpm) cpe:/a:redhat:service_mesh:3.4::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 4-1.4.2 , < * (rpm) Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Web Terminal 1.11	Unaffected: 1784296203 , < * (rpm) cpe:/a:redhat:webterminal:1.11::el9
Red Hat	Red Hat Web Terminal 1.12	Unaffected: 1784247610 , < * (rpm) cpe:/a:redhat:webterminal:1.12::el9
Red Hat	Red Hat Web Terminal 1.13	Unaffected: 1784296127 , < * (rpm) cpe:/a:redhat:webterminal:1.13::el9
Red Hat	Red Hat Web Terminal 1.14	Unaffected: 1784296114 , < * (rpm) cpe:/a:redhat:webterminal:1.14::el9
Red Hat	Red Hat Web Terminal 1.15	Unaffected: 1784296033 , < * (rpm) cpe:/a:redhat:webterminal:1.15::el9
Red Hat	Red Hat Web Terminal 1.16	Unaffected: 1786654871 , < * (rpm) cpe:/a:redhat:webterminal:1.16::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
Red Hat	Deployment Validation Operator	cpe:/a:redhat:deployment_validator_operator
Red Hat	ExternalDNS Operator	cpe:/a:redhat:ext_dns_optr:1
Red Hat	Fence Agents Remediation Operator	cpe:/a:redhat:workload_availability_far:0
Red Hat	File Integrity Operator	cpe:/a:redhat:openshift_file_integrity_operator:1
Red Hat	Gatekeeper 3	cpe:/a:redhat:gatekeeper:3
Red Hat	Logging Subsystem for Red Hat OpenShift	cpe:/a:redhat:logging:6
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4
Red Hat	Machine Deletion Remediation Operator	cpe:/a:redhat:workload_availability_mdr:0
Red Hat	Migration Toolkit for Applications 8	cpe:/a:redhat:migration_toolkit_applications:8
Red Hat	Migration Toolkit for Containers	cpe:/a:redhat:rhmt:1
Red Hat	mirror registry for Red Hat OpenShift 2	cpe:/a:redhat:mirror_registry:2
Red Hat	Multiarch Tuning Operator	cpe:/a:redhat:multiarch_tuning_operator
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	Node HealthCheck Operator	cpe:/a:redhat:workload_availability_nhc:0
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Power monitoring for Red Hat OpenShift	cpe:/a:redhat:openshift_power_monitoring
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ceph Storage 5	cpe:/a:redhat:ceph_storage:5
Red Hat	Red Hat Ceph Storage 6	cpe:/a:redhat:ceph_storage:6
Red Hat	Red Hat Ceph Storage 7	cpe:/a:redhat:ceph_storage:7
Red Hat	Red Hat Ceph Storage 8	cpe:/a:redhat:ceph_storage:8
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Connectivity Link 1	cpe:/a:redhat:connectivity_link:1
Red Hat	Red Hat Edge Manager 1	cpe:/a:redhat:edge_manager:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Cluster Manager CLI	cpe:/a:redhat:openshift_cluster_manager_cli:1
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Openshift Data Foundation 4	cpe:/a:redhat:openshift_data_foundation:4
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift Dev Workspaces Operator	cpe:/a:redhat:devworkspace
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift on AWS	cpe:/a:redhat:openshift_service_on_aws:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Service Interconnect 2	cpe:/a:redhat:service_interconnect:2
Red Hat	Security Profiles Operator	cpe:/a:redhat:openshift_security_profiles_operator:1
Red Hat	Service Telemetry Framework 1.5	cpe:/a:redhat:stf:1.5
Red Hat	streams for Apache Kafka 2	cpe:/a:redhat:amq_streams:2
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1
Red Hat	Zero Trust Workload Identity Manager - Tech Preview	cpe:/a:redhat:zero_trust_workload_identity_manager:0

Credits

Jakub Ciolek - https://ciolek.dev/

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-27145",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-04T12:34:03.859208Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-04T12:34:53.136Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.7-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.7-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.4-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openprinting-ipp-usb",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.9.27-7.el10_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.8-6.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.9.2-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.10-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-client",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.0-4.el10_2.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-server",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.1-2.el10_2.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.1-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.7-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.2-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.3-6.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "host-metering",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.4.0-8.el7_9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "go-toolset:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260710105056.a3795dee",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.5-9.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.4-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.22.2-7.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-8.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.2-1.el9_2.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.4-9.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-1.el9_6.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.23.0-5.rhaos4.18.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "collectd-sensubility",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.1-1.1.el8ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el8sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.17 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.18 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.19 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github",
            "product": "Streams for Apache Kafka 3.2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "danielqsj-kafka_exporter",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "Cert Manager support for Red Hat OpenShift release 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786613805",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/perses-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787593946",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_compliance_operator:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "Compliance Operator 1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786380082",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "external secrets operator for Red Hat OpenShift 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786614676",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786549223",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787201612",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786764622",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787176886",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/addon-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911941",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/backplane-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911952",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911945",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786912006",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911973",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/multicloud-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911950",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/placement-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911984",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-operator-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911984",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/work-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786907276",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787238383",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787239116",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787239595",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786577950",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786750700",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786983362",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786664288",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259112",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787264185",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259740",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787260821",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/backplane-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784737366",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784738758",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784677239",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/addon-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259015",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259059",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259011",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259016",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787258993",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259044",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/multicloud-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259047",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/placement-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259099",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-operator-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259126",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/work-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259113",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787195995",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787201646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786764601",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787176716",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.4.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784061472",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784152046",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.7.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784768332",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785775948",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.8.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785763319",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788860461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:source_to_image:1.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "source-to-image/source-to-image-rhel8",
            "product": "OpenShift Developer Tools and Services 1.6.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784727697",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:source_to_image:1.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "source-to-image/source-to-image-rhel9",
            "product": "OpenShift Developer Tools and Services 1.6.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784728036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787260689",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787262214",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787260663",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787263584",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/kube-rbac-proxy-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784677172",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multiclusterhub-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784638644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-observability-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784590741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259106",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259284",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259310",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787263693",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787183407",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786976940",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787172840",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787170830",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786547792",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786547807",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786549537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787252179",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242135",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242105",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242321",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787243221",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242131",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242099",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/subctl-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788105072",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783917963",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-rhel9-operator",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782767215",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-25-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.25.11-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-26-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.26.4-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
            "product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786483782",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhel9-operator",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784004914",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057868",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-rhel9-operator",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784121108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783612119",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787554347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786754425",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786526139",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-collector-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785704636",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785704547",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885742",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784908682",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784917979",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885281",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885133",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784953556",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784918113",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784921753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784921772",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784953743",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784918117",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885810",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885681",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784908639",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785316150",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785131046",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785131063",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785131291",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785317214",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "conforma-cli-stack-v1",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.2",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296203",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784247610",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296127",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296033",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786654871",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/assisted-installer-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "build-of-trustee/trustee-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
            "product": "Custom Metric Autoscaler operator for Red Hat Openshift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:deployment_validator_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "dvo/deployment-validation-rhel8-operator",
            "product": "Deployment Validation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9-operator",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/fence-agents-remediation-rhel8-operator",
            "product": "Fence Agents Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_file_integrity_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "File Integrity Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "gatekeeper/gatekeeper-rhel9-operator",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-rhel9-operator",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel8",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel9",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/machine-deletion-remediation-rhel8-operator",
            "product": "Machine Deletion Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Migration Toolkit for Applications 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-registry-rhel8",
            "product": "Migration Toolkit for Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:mirror_registry:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift/mirror-registry-rhel8",
            "product": "mirror registry for Red Hat OpenShift 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multiarch_tuning_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
            "product": "Multiarch Tuning Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "unaffected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hive-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/maestro-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-cli-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "unaffected",
            "packageName": "helm",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines-client",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-scheduler-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kn-workflow-plugin",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-serverless-1/logic-rhel9-operator",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-clients",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rh-osbs/openshift-golang-builder",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_power_monitoring"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-power-monitoring/kepler-rhel9",
            "product": "Power monitoring for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/3scale-rhel7-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/3scale-rhel9-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-volsync-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/config-policy-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/governance-policy-propagator-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/thanos-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel9",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform/platform-operator-bundle",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl30",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl32",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3x-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:5"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/snmp-notifier-rhel8",
            "product": "Red Hat Ceph Storage 5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/snmp-notifier-rhel9",
            "product": "Red Hat Ceph Storage 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhceph/grafana-rhel9",
            "product": "Red Hat Ceph Storage 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhceph/grafana-rhel9",
            "product": "Red Hat Ceph Storage 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhceph/alloy-rhel10",
            "product": "Red Hat Ceph Storage 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/authorino-rhel9",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/coredns-rhel9",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "Red Hat Edge Manager 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel10/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhc-worker-script",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/buildah",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/conmon",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/podman",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/runc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/skopeo",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/toolbox",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel9/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "runc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-rhel8-operator",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/rhai-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_cluster_manager_cli:1"
            ],
            "defaultStatus": "affected",
            "packageName": "ocm-cli-clients/ocm-cli-rhel9",
            "product": "Red Hat OpenShift Cluster Manager CLI",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon-rs",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-prometheus-promu",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ignition",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kata-containers",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/frr-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-cli",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-kuryr",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-crio-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-osbs/openshift-golang-builder",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "runc",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "devspaces/udi-rhel9",
            "product": "Red Hat OpenShift Dev Spaces",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:devworkspace"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-rhel9-operator",
            "product": "Red Hat OpenShift Dev Workspaces Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosdt/tempo-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-gitops-1/dex-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-gitops-1/dex-rhel9",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_service_on_aws:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rosa",
            "product": "Red Hat OpenShift on AWS",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-redfish-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kubevirt",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-osbs/openshift-golang-builder",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "collectd-libpod-stats",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-rhel9/osp-director-agent",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openstack-k8s-operators-os-diff",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoso-operators/sg-core-rhel9",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite:el8/yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-selinuxd-rhel8",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:stf:1.5"
            ],
            "defaultStatus": "unaffected",
            "packageName": "stf/sg-core-rhel9",
            "product": "Service Telemetry Framework 1.5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-danielqsj-kafka_exporter",
            "product": "streams for Apache Kafka 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-02T22:01:36.954Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-606",
                "description": "Unchecked Input for Loop Condition",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:09:12.800Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
          },
          {
            "name": "RHBZ#2484207",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42079"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42080"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53416"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54757"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57482"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42082"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42150"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42240"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49703"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49702"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53413"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53374"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54168"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51187"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46394"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46395"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29980"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35832"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34357"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39005"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42946"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39573"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:38995"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41930"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61253"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60354"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57649"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53412"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60315"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53415"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54401"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29981"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34359"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39879"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36317"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61314"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54500"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41030"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44622"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47149"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53530"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:52946"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51057"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47737"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60390"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60388"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54427"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60391"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60386"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63016"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42142"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33574"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23264"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54441"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42644"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36648"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41036"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60025"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57488"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54603"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49705"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49729"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49744"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49765"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49770"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50205"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36797"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42043"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42047"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42050"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42051"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42049"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55899"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54435"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54525"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59556"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59593"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59557"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54432"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59579"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59558"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47735"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59559"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53416: Red Hat Enterprise Linux Server (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57482: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46394: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29980: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29981: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36317: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61314: Cluster Observability Operator 1.5.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54500: Compliance Operator 1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44622: Multicluster Global Hub 1.6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:52946: Multicluster Global Hub 1.8.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66022: OpenShift API for Data Protection 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60390: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60388: Red Hat Advanced Cluster Management for Kubernetes 2.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54427: Red Hat Advanced Cluster Management for Kubernetes 2.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60391: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63016: Red Hat Advanced Cluster Management for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23262: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23264: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60025: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57488: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49705: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49729: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49744: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49765: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49770: Red Hat OpenShift Service Mesh 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55899: Red Hat Web Terminal 1.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54525: external secrets operator for Red Hat OpenShift 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59556: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59593: multicluster engine for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59557: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54432: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59579: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59558: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59559: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-02T23:01:08.992Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-02T22:01:36.954Z",
            "value": "Made public."
          }
        ],
        "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
        "workarounds": [
          {
            "lang": "en",
            "value": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037)."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "HostnameError.Error"
            },
            {
              "name": "matchHostnames"
            },
            {
              "name": "Certificate.Verify"
            },
            {
              "name": "Certificate.VerifyHostname"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.11",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.4",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek - https://ciolek.dev/"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-02T22:01:36.954Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/783621"
        },
        {
          "url": "https://go.dev/issue/79694"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5037"
        }
      ],
      "title": "Inefficient candidate hostname parsing in crypto/x509"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-27145",
    "datePublished": "2026-06-02T22:01:36.954Z",
    "dateReserved": "2026-02-17T19:57:28.435Z",
    "dateUpdated": "2026-09-11T12:09:12.800Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-35469 (GCVE-0-2026-35469)

Vulnerability from cvelistv5 – Published: 2026-04-16 21:19 – Updated: 2026-09-11 12:09

Title

SpdyStream: DOS on CRI

Summary

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes — all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-17 12:37 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M mitre root

References

89 references

URL	Tags
https://github.com/moby/spdystream/security/advis…	x_refsource_CONFIRM
https://github.com/moby/spdystream/releases/tag/v0.5.1	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2026-35469	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2457729	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:41019	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51422	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34755	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61314	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66521	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17704	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11070	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:13791	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:13829	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53655	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36162	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33078	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33071	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27914	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27983	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27903	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27941	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34050	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40030	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21697	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40023	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21692	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25009	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43253	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23235	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43227	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36621	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20089	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25046	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47728	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34099	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47729	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17599	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60023	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17598	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34100	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40828	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29857	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37193	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17449	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51013	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:12118	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29858	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21658	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37580	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37581	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25201	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34766	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20042	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27004	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51007	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20041	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29865	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37629	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34791	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17469	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27063	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17468	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29801	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37187	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25187	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34769	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63046	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17475	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44267	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20034	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29835	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25207	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34794	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29795	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44237	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27010	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56431	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19108	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19099	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59557	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17121	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17123	vendor-advisoryx_refsource_REDHAT

Impacted products

168 products

Vendor	Product	Version
moby	spdystream	Affected: < 0.5.1
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 0:4.19.0-202606301915.p2.g63adf01.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 0:4.19.42-202608062155.p0.g46c9d67.assembly.4.19.42.el9 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	RHEM 1.0 for RHEL 9	Unaffected: 0:1.0.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	RHEM 1.1 for RHEL 10	Unaffected: 0:1.1.3-1.el10em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	RHEM 1.1 for RHEL 9	Unaffected: 0:1.1.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1787593637 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.6	Unaffected: 1788439505 , < * (rpm) cpe:/a:redhat:logging:6.6::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1779135478 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1786548918 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1778892370 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1778288655 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el8
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1778288646 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1778264389 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1778302921 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Security 4.8	Unaffected: 1777307791 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.8::el8
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1777986630 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1777976489 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Container Native Virtualization 4.13	Unaffected: 1786346620 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.13::el9
Red Hat	Red Hat Container Native Virtualization 4.15	Unaffected: 1783042900 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.15::el9
Red Hat	Red Hat Container Native Virtualization 4.16	Unaffected: 1782184329 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.16::el9
Red Hat	Red Hat Container Native Virtualization 4.17	Unaffected: 1782358244 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.17::el9
Red Hat	Red Hat Container Native Virtualization 4.19	Unaffected: 1781590993 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.19::el9
Red Hat	Red Hat Container Native Virtualization 4.20	Unaffected: 1781838712 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.20::el9
Red Hat	Red Hat Container Native Virtualization 4.21	Unaffected: 1782012918 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.21::el9
Red Hat	Red Hat Container Native Virtualization 4.22	Unaffected: 1781852593 , < * (rpm) cpe:/a:redhat:container_native_virtualization:4.22::el9
Red Hat	Red Hat OpenShift Container Platform 4.12	Unaffected: 1779716480 , < * (rpm) cpe:/a:redhat:openshift:4.12::el9
Red Hat	Red Hat OpenShift Container Platform 4.12	Unaffected: 1779716474 , < * (rpm) cpe:/a:redhat:openshift:4.12::el9
Red Hat	Red Hat OpenShift Container Platform 4.12	Unaffected: 1779716476 , < * (rpm) cpe:/a:redhat:openshift:4.12::el9
Red Hat	Red Hat OpenShift Container Platform 4.12	Unaffected: 1782395416 , < * (rpm) cpe:/a:redhat:openshift:4.12::el9
Red Hat	Red Hat OpenShift Container Platform 4.12	Unaffected: 1784054795 , < * (rpm) cpe:/a:redhat:openshift:4.12::el9
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 1779889638 , < * (rpm) cpe:/a:redhat:openshift:4.13::el9
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 1779889606 , < * (rpm) cpe:/a:redhat:openshift:4.13::el9
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 1779864381 , < * (rpm) cpe:/a:redhat:openshift:4.13::el9
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 1784056255 , < * (rpm) cpe:/a:redhat:openshift:4.13::el9
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 1784055726 , < * (rpm) cpe:/a:redhat:openshift:4.13::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 1780956818 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 1780955979 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 1781006909 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 1780956441 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 1784582377 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 1779915764 , < * (rpm) cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 1779916110 , < * (rpm) cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 1779915561 , < * (rpm) cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 1779915526 , < * (rpm) cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 1784576933 , < * (rpm) cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1779251341 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1780954827 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1780954223 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1780955112 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1782934190 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1782904234 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1778707884 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1778701022 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1782187374 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1782189013 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1782186020 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1782186155 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1782185537 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1784313542 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1784319218 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1787560246 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1777070108 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1778521451 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1779779708 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1779780608 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1779780022 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1782175121 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1782173522 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1782190146 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1783084308 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1783702867 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1785655390 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1779251684 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1779252023 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1779250076 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1779249730 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1779249801 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1781002119 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1781557059 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1782189936 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1782871003 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1782879945 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1783358181 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1783088446 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1785600792 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1778138337 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1778522102 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1781023952 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1781196883 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1781844985 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1782865684 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1783419985 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1785857530 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1778164872 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1779250427 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1780973735 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1780979102 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1782311084 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1782861857 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1783090488 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1784548626 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1788278260 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1781103659 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1781640970 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1782109368 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1782878115 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1782878255 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1784702398 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705347 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706101 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705558 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705646 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706138 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705741 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705777 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705802 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705938 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706577 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706125 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706177 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706188 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706679 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706357 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706612 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706644 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706659 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706880 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932114 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782931768 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932104 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536000 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783535989 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536515 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932521 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018461 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018421 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932812 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537001 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932919 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537586 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932969 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933015 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933042 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537392 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933235 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933251 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537955 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933417 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537742 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933602 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783019377 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934054 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934036 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934284 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	cert-manager Operator for Red Hat OpenShift	cpe:/a:redhat:cert_manager:1
Red Hat	Dynamic Accelerator Slicer Operator for Red Hat OpenShift	cpe:/a:redhat:dynamic_accelerator_slicer:1
Red Hat	External Secrets Operator for Red Hat OpenShift	cpe:/a:redhat:external_secrets_operator:1
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35469",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-17T12:37:18.505269Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-17T12:37:27.329Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.19.0-202606301915.p2.g63adf01.assembly.stream.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.19.42-202608062155.p0.g46c9d67.assembly.4.19.42.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.0 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el10em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/cluster-observability-rhel9-operator",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787593637",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/cluster-logging-rhel9-operator",
            "product": "Logging Subsystem for Red Hat OpenShift 6.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788439505",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779135478",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/image-based-install-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786548918",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778892370",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-8-rhel8",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778288655",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778288646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778264389",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778302921",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777307791",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777986630",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777976489",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-exportserver-rhel9",
            "product": "Red Hat Container Native Virtualization 4.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786346620",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-exportserver-rhel9",
            "product": "Red Hat Container Native Virtualization 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783042900",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-exportserver-rhel9",
            "product": "Red Hat Container Native Virtualization 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782184329",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-exportserver-rhel9",
            "product": "Red Hat Container Native Virtualization 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782358244",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-exportserver-rhel9",
            "product": "Red Hat Container Native Virtualization 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781590993",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-exportserver-rhel9",
            "product": "Red Hat Container Native Virtualization 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781838712",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-exportserver-rhel9",
            "product": "Red Hat Container Native Virtualization 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782012918",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-exportserver-rhel9",
            "product": "Red Hat Container Native Virtualization 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781852593",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-config-daemon",
            "product": "Red Hat OpenShift Container Platform 4.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779716480",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-operator",
            "product": "Red Hat OpenShift Container Platform 4.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779716474",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-webhook",
            "product": "Red Hat OpenShift Container Platform 4.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779716476",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-node-feature-discovery",
            "product": "Red Hat OpenShift Container Platform 4.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782395416",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-openshift-apiserver-rhel8",
            "product": "Red Hat OpenShift Container Platform 4.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784054795",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-config-daemon",
            "product": "Red Hat OpenShift Container Platform 4.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779889638",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-operator",
            "product": "Red Hat OpenShift Container Platform 4.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779889606",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-webhook",
            "product": "Red Hat OpenShift Container Platform 4.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779864381",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-openshift-apiserver-rhel8",
            "product": "Red Hat OpenShift Container Platform 4.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784056255",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-node-feature-discovery",
            "product": "Red Hat OpenShift Container Platform 4.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784055726",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-node-feature-discovery",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780956818",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-config-daemon",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780955979",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-operator",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781006909",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-webhook",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780956441",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-openshift-apiserver-rhel8",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784582377",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-node-feature-discovery-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779915764",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-config-daemon-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779916110",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779915561",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-webhook-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779915526",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-openshift-apiserver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784576933",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-node-feature-discovery-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779251341",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-config-daemon-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780954827",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780954223",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-webhook-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780955112",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cluster-node-tuning-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934190",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-openshift-apiserver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782904234",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-powervs-block-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778707884",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-node-feature-discovery-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778701022",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cluster-node-tuning-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782187374",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-openshift-apiserver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782189013",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-smb-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782186020",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-config-daemon-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782186155",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782185537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-webhook-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782186155",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-aws-ebs-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784313542",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-csi-external-provisioner-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784319218",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ovn-kubernetes-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787560246",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-powervs-block-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777070108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-node-feature-discovery-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778521451",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-config-daemon-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779779708",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779780608",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-webhook-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779780022",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cluster-node-tuning-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782175121",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-openshift-apiserver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782173522",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-smb-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782190146",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-csi-external-provisioner-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783084308",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-aws-ebs-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783702867",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ovn-kubernetes-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785655390",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-powervs-block-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779251684",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-node-feature-discovery-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779252023",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-config-daemon-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779250076",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779249730",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sriov-network-webhook-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779249801",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cluster-node-tuning-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781002119",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-openshift-apiserver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781557059",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-smb-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782189936",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-csi-external-provisioner-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782871003",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-hyperkube-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782879945",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-aws-ebs-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783358181",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-aws-efs-csi-driver-container-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783088446",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ovn-kubernetes-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785600792",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-powervs-block-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778138337",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-node-feature-discovery-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778522102",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cluster-node-tuning-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781023952",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-openshift-apiserver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781196883",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-smb-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781844985",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-csi-external-provisioner-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782865684",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-aws-efs-csi-driver-container-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783419985",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ovn-kubernetes-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785857530",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-node-feature-discovery-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778164872",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-powervs-block-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779250427",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cluster-node-tuning-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780973735",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-openshift-apiserver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780979102",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-smb-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782311084",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-csi-external-provisioner-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782861857",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-aws-efs-csi-driver-container-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783090488",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ovn-kubernetes-microshift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784548626",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788278260",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-aws-efs-csi-driver-container-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781103659",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-smb-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781640970",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-csi-external-provisioner-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782109368",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-azure-disk-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782878115",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-csi-node-driver-registrar-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782878255",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ovn-kubernetes-microshift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784702398",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706101",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705558",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706138",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705802",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705938",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706577",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706125",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706177",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706188",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706679",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706357",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706612",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706659",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706880",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782931768",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/devicefinder-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932104",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536000",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783535989",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536515",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932521",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018421",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-blackbox-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537001",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932919",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537586",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932969",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933015",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933042",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-drbd-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537392",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933235",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933251",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537955",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933417",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537742",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933602",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783019377",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934054",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934284",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/cert-manager-operator-bundle",
            "product": "cert-manager Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/cert-manager-operator-rhel9",
            "product": "cert-manager Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-acmesolver-rhel9",
            "product": "cert-manager Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "cert-manager Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:dynamic_accelerator_slicer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "dynamic-accelerator-slicer-tech-preview/instaslice-daemonset-rhel9",
            "product": "Dynamic Accelerator Slicer Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:dynamic_accelerator_slicer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "dynamic-accelerator-slicer-tech-preview/instaslice-operator-bundle",
            "product": "Dynamic Accelerator Slicer Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:dynamic_accelerator_slicer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "dynamic-accelerator-slicer-tech-preview/instaslice-rhel9-operator",
            "product": "Dynamic Accelerator Slicer Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:dynamic_accelerator_slicer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "dynamic-accelerator-slicer-tech-preview/instaslice-scheduler-rhel9",
            "product": "Dynamic Accelerator Slicer Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:dynamic_accelerator_slicer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "dynamic-accelerator-slicer-tech-preview/instaslice-webhook-rhel9",
            "product": "Dynamic Accelerator Slicer Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "external-secrets-operator/bitwarden-sdk-server-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "external-secrets-operator/external-secrets-operator-bundle",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "external-secrets-operator/external-secrets-operator-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-must-gather-rhel8",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-must-gather-rhel9",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-operator-bundle",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-rhel9-operator",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-api-provider-kubevirt-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "unaffected",
            "packageName": "multicluster-engine/hive-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-rhel9-operator",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/must-gather-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-must-gather-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/cnf-tests-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4-dev-preview-beta/openperouter-operator-bundle",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4-dev-preview-beta/openperouter-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/kubevirt-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/microshift-bootc-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/noderesourcetopology-scheduler-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/numaresources-must-gather-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/numaresources-operator-bundle",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/numaresources-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/openshift-route-controller-manager-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-aws-cloud-controller-manager-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-azure-cloud-controller-manager-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-azure-cloud-controller-manager-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-azure-cloud-node-manager-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-azure-cloud-node-manager-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-azure-disk-csi-driver-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-azure-file-csi-driver-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-azure-file-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-cluster-autoscaler-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-cluster-capacity-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-cluster-kube-apiserver-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-cluster-kube-apiserver-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-cluster-policy-controller-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-csi-driver-manila-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-csi-driver-manila-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-csi-driver-nfs-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-cni-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-daemon-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-intel-ipu-p4sdk-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-intel-ipu-vsp-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-intel-netsec-vsp-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-marvell-cp-agent-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-marvell-vsp-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-network-resources-injector-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-gcp-cloud-controller-manager-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-ibm-vpc-block-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-kube-proxy-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-machine-config-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-multus-cni-microshift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-multus-cni-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-openshift-controller-manager-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-openshift-controller-manager-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-openstack-cinder-csi-driver-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-openstack-cinder-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-openstack-cloud-controller-manager-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-openstack-cloud-controller-manager-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-sriov-network-device-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-sriov-network-metrics-exporter-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-tests",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-tests-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-vmware-vsphere-csi-driver-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-vmware-vsphere-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-vsphere-csi-driver-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-vsphere-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-vsphere-csi-driver-syncer-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-vsphere-csi-driver-syncer-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/sriov-network-metrics-exporter-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel8-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ztp-site-generate-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift/ose-rhel-coreos-8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift/ose-rhel-coreos-9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosdt/opentelemetry-collector-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4-wincw/windows-machine-config-operator-bundle",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argo-rollouts-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/libguestfs-tools-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/multus-dynamic-networks-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/passt-network-binding-plugin-cni-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/pr-helper-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/sidecar-shim-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-api-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-artifacts-server-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-controller-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-exportproxy-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-handler-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-launcher-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-operator-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/wasp-agent-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-04-13T23:59:59.000Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:09:03.706Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-35469"
          },
          {
            "name": "RHBZ#2457729",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35469.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41019"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51422"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34755"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61314"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66521"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17704"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11070"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11217"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:13791"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:13829"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53655"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36162"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33078"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33071"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27914"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27983"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27903"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27941"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34050"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40030"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21697"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40023"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21692"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25009"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43253"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23235"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43227"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36621"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20089"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25046"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47728"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34099"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47729"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17599"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60023"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17598"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34100"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40828"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29857"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37193"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17449"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51013"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:12118"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29858"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21658"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37580"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37581"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25201"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34766"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20042"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27004"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51007"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20041"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29865"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37629"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34791"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17469"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27063"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17468"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29801"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37187"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25187"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34769"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63046"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17475"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44267"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20034"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29835"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25207"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34794"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29795"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44237"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27010"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56431"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19108"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19099"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59557"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17121"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17123"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51422: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34755: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61314: Cluster Observability Operator 1.5.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66521: Logging Subsystem for Red Hat OpenShift 6.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17704: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11070: Red Hat Advanced Cluster Security 4.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11217: Red Hat Advanced Cluster Security 4.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:13791: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53655: Red Hat Container Native Virtualization 4.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36162: Red Hat Container Native Virtualization 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33078: Red Hat Container Native Virtualization 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33071: Red Hat Container Native Virtualization 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27914: Red Hat Container Native Virtualization 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27983: Red Hat Container Native Virtualization 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27903: Red Hat Container Native Virtualization 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27941: Red Hat Container Native Virtualization 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34050: Red Hat OpenShift Container Platform 4.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40030: Red Hat OpenShift Container Platform 4.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21697: Red Hat OpenShift Container Platform 4.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40023: Red Hat OpenShift Container Platform 4.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40022: Red Hat OpenShift Container Platform 4.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21692: Red Hat OpenShift Container Platform 4.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25009: Red Hat OpenShift Container Platform 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43253: Red Hat OpenShift Container Platform 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23235: Red Hat OpenShift Container Platform 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43227: Red Hat OpenShift Container Platform 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36621: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20089: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25046: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47728: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34099: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47729: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17599: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60023: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34100: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40828: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29857: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37193: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17449: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51013: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:12118: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29858: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21658: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37580: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37581: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25201: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34766: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20042: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27004: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51007: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29865: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37629: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25194: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34791: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17469: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51022: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29801: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37187: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25187: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34769: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63046: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17475: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44267: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20034: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29835: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25207: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34794: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29795: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44237: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27010: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19108: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19099: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59557: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17121: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17123: multicluster engine for Kubernetes 2.8"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-04-13T03:52:35.000Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-04-13T23:59:59.000Z",
            "value": "Made public."
          }
        ],
        "title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
        "workarounds": [
          {
            "lang": "en",
            "value": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "spdystream",
          "vendor": "moby",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.5.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes \u2014 all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-16T21:19:23.516Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2"
        },
        {
          "name": "https://github.com/moby/spdystream/releases/tag/v0.5.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/moby/spdystream/releases/tag/v0.5.1"
        }
      ],
      "source": {
        "advisory": "GHSA-pc3f-x583-g7j2",
        "discovery": "UNKNOWN"
      },
      "title": "SpdyStream: DOS on CRI"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-35469",
    "datePublished": "2026-04-16T21:19:23.516Z",
    "dateReserved": "2026-04-02T20:49:44.452Z",
    "dateUpdated": "2026-09-11T12:09:03.706Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-66794 (GCVE-0-2026-66794)

Vulnerability from cvelistv5 – Published: 2026-08-19 17:30 – Updated: 2026-09-08 12:15

Title

Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public route

Summary

Severity

9.3 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-21 19:33 UTC

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

redhat redhat root

References

8 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:59556	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59557	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59558	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59559	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59579	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59593	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-66794	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2507539	issue-trackingx_refsource_REDHAT

Impacted products

6 products

Vendor	Product	Version
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1787173361 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787276784 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786983349 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787275318 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787275519 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787274923 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9

Date Public

2026-08-19 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-66794",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-21T19:33:05.335178Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-21T19:33:17.053Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.10::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/cluster-proxy-addon-rhel9",
          "product": "multicluster engine for Kubernetes 2.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787173361",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.11::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/cluster-proxy-rhel9",
          "product": "multicluster engine for Kubernetes 2.11",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787276784",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/cluster-proxy-rhel9",
          "product": "multicluster engine for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1786983349",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.6::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/cluster-proxy-addon-rhel9",
          "product": "multicluster engine for Kubernetes 2.6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787275318",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/cluster-proxy-addon-rhel9",
          "product": "multicluster engine for Kubernetes 2.8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787275519",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.9::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/cluster-proxy-addon-rhel9",
          "product": "multicluster engine for Kubernetes 2.9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787274923",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "datePublic": "2026-08-19T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the `cluster-proxy-addon` component of Multicluster Engine for Kubernetes. This vulnerability allows an unauthenticated attacker, who can access the user-facing route, to bypass authentication and authorization checks. By manipulating URL path segments, the attacker can proxy requests to arbitrary services across any managed cluster. This enables unauthorized access to internal services that would otherwise be protected, potentially leading to information disclosure or further compromise of the cluster environment."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T12:15:02.672Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:59556",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59556"
        },
        {
          "name": "RHSA-2026:59557",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59557"
        },
        {
          "name": "RHSA-2026:59558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59558"
        },
        {
          "name": "RHSA-2026:59559",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59559"
        },
        {
          "name": "RHSA-2026:59579",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59579"
        },
        {
          "name": "RHSA-2026:59593",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59593"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-66794"
        },
        {
          "name": "RHBZ#2507539",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507539"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-27T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-19T14:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public route",
      "workarounds": [
        {
          "lang": "en",
          "value": "To mitigate this issue, restrict network access to the user-facing Route of the `cluster-proxy-addon` to trusted networks only. Implement firewall rules to limit inbound connections to the Route\u0027s exposed port, ensuring only authorized sources can reach it. This reduces the attack surface by preventing unauthenticated external access to the vulnerable proxy."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-918: Server-Side Request Forgery (SSRF)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-66794",
    "datePublished": "2026-08-19T17:30:07.984Z",
    "dateReserved": "2026-07-27T17:51:24.886Z",
    "dateUpdated": "2026-09-08T12:15:02.672Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-66795 (GCVE-0-2026-66795)

Vulnerability from cvelistv5 – Published: 2026-08-17 20:45 – Updated: 2026-09-08 12:15

Title

Managedcluster-import-controller: csr auto-approver does not validate certificate subject or signername (spoke→hub cluster-admin)

Summary

Severity

9.9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 15:15 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

redhat redhat root

References

8 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:59556	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59557	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59558	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59559	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59579	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59593	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-66795	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2507540	issue-trackingx_refsource_REDHAT

Impacted products

6 products

Vendor	Product	Version
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1787078272 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787078330 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786577915 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787260779 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259044 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787078307 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9

Date Public

2026-08-17 20:29

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-66795",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T15:15:25.705433Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T15:15:40.084Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.10::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787078272",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.11::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.11",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787078330",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1786577915",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.6::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787260779",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787259044",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:multicluster_engine:2.9::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
          "product": "multicluster engine for Kubernetes 2.9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787078307",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "datePublic": "2026-08-17T20:29:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the managedcluster-import-controller. The Certificate Signing Request (CSR) auto-approval logic improperly validates incoming CSRs, specifically by not inspecting the signer name or decoding the PEM-encoded x509 CSR. This vulnerability allows a privileged service account on a spoke cluster to submit a malicious CSR. Successful exploitation can lead to privilege escalation, enabling the attacker to obtain administrative credentials on the hub cluster."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T12:15:09.394Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:59556",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59556"
        },
        {
          "name": "RHSA-2026:59557",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59557"
        },
        {
          "name": "RHSA-2026:59558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59558"
        },
        {
          "name": "RHSA-2026:59559",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59559"
        },
        {
          "name": "RHSA-2026:59579",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59579"
        },
        {
          "name": "RHSA-2026:59593",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:59593"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-66795"
        },
        {
          "name": "RHBZ#2507540",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507540"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-27T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-08-17T20:29:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Managedcluster-import-controller: csr auto-approver does not validate certificate subject or signername (spoke\u2192hub cluster-admin)",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-295: Improper Certificate Validation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-66795",
    "datePublished": "2026-08-17T20:45:33.786Z",
    "dateReserved": "2026-07-27T17:51:24.886Z",
    "dateUpdated": "2026-09-08T12:15:09.394Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-66804 (GCVE-0-2026-66804)

Vulnerability from cvelistv5 – Published: 2026-08-11 17:05 – Updated: 2026-09-14 17:12

Title

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

Summary

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-12 15:47 UTC

CWE

CWE-284 - Improper Access Control

Assigner

microsoft mitre root

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

4 products

Vendor	Product	Version
Microsoft	Windows 10 Version 22H2	Affected: 10.0.19045.0 , < 10.0.19045.7663 (custom)
Microsoft	Windows 11 Version 24H2	Affected: 10.0.26100.0 , < 10.0.26100.9168 (custom)
Microsoft	Windows 11 Version 25H2	Affected: 10.0.26200.0 , < 10.0.26200.9168 (custom)
Microsoft	Windows 11 version 26H1	Affected: 10.0.28000.0 , < 10.0.28000.2704 (custom)

Date Public

2026-08-11 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-66804",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-12T15:47:52.685838Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-12T15:48:09.360Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "32-bit Systems",
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 10 Version 22H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19045.7663",
              "status": "affected",
              "version": "10.0.19045.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 24H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26100.9168",
              "status": "affected",
              "version": "10.0.26100.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 Version 25H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.26200.9168",
              "status": "affected",
              "version": "10.0.26200.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ARM64-based Systems",
            "x64-based Systems"
          ],
          "product": "Windows 11 version 26H1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.28000.2704",
              "status": "affected",
              "version": "10.0.28000.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.19045.7663",
                  "versionStartIncluding": "10.0.19045.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.26200.9168",
                  "versionStartIncluding": "10.0.26200.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
                  "versionEndExcluding": "10.0.26100.9168",
                  "versionStartIncluding": "10.0.26100.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*",
                  "versionEndExcluding": "10.0.28000.2704",
                  "versionStartIncluding": "10.0.28000.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-08-11T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T17:12:33.515Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66804"
        }
      ],
      "title": "Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-66804",
    "datePublished": "2026-08-11T17:05:36.051Z",
    "dateReserved": "2026-07-27T19:02:26.601Z",
    "dateUpdated": "2026-09-14T17:12:33.515Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2026:59557

CVE-2024-45336 (GCVE-0-2024-45336)

CVE-2025-22866 (GCVE-0-2025-22866)

CVE-2026-10059 (GCVE-0-2026-10059)

CVE-2026-12143 (GCVE-0-2026-12143)

CVE-2026-19130 (GCVE-0-2026-19130)

CVE-2026-27145 (GCVE-0-2026-27145)

CVE-2026-35469 (GCVE-0-2026-35469)

CVE-2026-66794 (GCVE-0-2026-66794)

CVE-2026-66795 (GCVE-0-2026-66795)

CVE-2026-66804 (GCVE-0-2026-66804)

Tags

Sightings

Nomenclature