Vulnerability-Lookup

RHSA-2026:66022

Vulnerability from csaf_redhat - Published: 2026-09-09 14:59 - Updated: 2026-09-12 07:23

Summary

Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

Severity

Important

Notes

Topic: A new version of OpenShift API for Data Protection (OADP) is now available.

Details: OpenShift API for Data Protection (OADP) enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and snapshot-based backups for persistent volumes.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-15792

A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service (DoS), making the BuildKit service unavailable.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Workaround

Threats

Impact Moderate

CVE-2026-25681

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 16 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 33 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-27136

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 16 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 33 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-27145

A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-32283

A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-764 - Multiple Locks of a Critical Resource

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-33811

A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1341 - Multiple Releases of Same Resource or Handle

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix

Known not affected 45 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64		—

Threats

Impact Important

CVE-2026-39820

A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-39821

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-39828

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-281 - Improper Preservation of Permissions

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-39829

A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1284 - Improper Validation of Specified Quantity in Input

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-39830

A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-39831

A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix

Known not affected 41 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64		—

Threats

Impact Important

CVE-2026-39833

A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CWE-358 - Improperly Implemented Security Check for Standard

Affected products

Fixed 24 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 25 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround

Threats

Impact Moderate

CVE-2026-39835

A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-41178

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 20 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix

Known not affected 29 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64		—

Threats

Impact Important

CVE-2026-42499

A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1046 - Creation of Immutable Text Using String Concatenation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-42502

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 16 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 33 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Moderate

CVE-2026-42504

A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-42508

A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix

Known not affected 45 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64		—

Threats

Impact Important

CVE-2026-44740

A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Workaround

Threats

Impact Important

CVE-2026-46595

A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

CWE-303 - Incorrect Implementation of Authentication Algorithm

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix

Known not affected 45 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64		—

Threats

Impact Important

CVE-2026-46597

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-681 - Incorrect Conversion between Numeric Types

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-53488

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.

8.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Workaround

Threats

Impact Important

CVE-2026-53492

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix

Known not affected 45 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64		—

Threats

Impact Important

CVE-2026-56852

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-56853

A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix

Known not affected 45 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64		—

Threats

Impact Important

CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix

Known not affected 45 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64		—

Threats

Impact Important

CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround

Threats

Impact Important

CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix

Known not affected 45 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64		—

Threats

Impact Important

CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix

Known not affected 45 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64		—

Threats

Impact Important

CVE-2026-71235

A flaw was found in Magistrala's Rules Engine. An authenticated low-privileged user can exploit this vulnerability by creating rules with embedded Go or Lua scripts. These scripts are executed server-side without sufficient validation, allowing for arbitrary file read and write operations, access to internal databases, and Server-Side Request Forgery (SSRF) against internal microservices. This could lead to significant data compromise and unauthorized system access.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Vendor Fix fix
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Vendor Fix fix

Known not affected 45 products

Product	Identifier	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x		—
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64		—

Threats

Impact Important

CVE-2026-75593

A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. A malicious client with valid permissions to access the BuildKit control API can craft a special upload request. This request allows files to escape from the BuildKit-controlled state directory, potentially leading to unauthorized modification or deletion of files on the system.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64	—	Workaround
Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64	—	Workaround

Threats

Impact Moderate

References

267 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:66022	self
https://access.redhat.com/security/cve/CVE-2026-15792	external
https://access.redhat.com/security/cve/CVE-2026-25681	external
https://access.redhat.com/security/cve/CVE-2026-27136	external
https://access.redhat.com/security/cve/CVE-2026-27145	external
https://access.redhat.com/security/cve/CVE-2026-32283	external
https://access.redhat.com/security/cve/CVE-2026-33811	external
https://access.redhat.com/security/cve/CVE-2026-33818	external
https://access.redhat.com/security/cve/CVE-2026-39820	external
https://access.redhat.com/security/cve/CVE-2026-39821	external
https://access.redhat.com/security/cve/CVE-2026-39828	external
https://access.redhat.com/security/cve/CVE-2026-39829	external
https://access.redhat.com/security/cve/CVE-2026-39830	external
https://access.redhat.com/security/cve/CVE-2026-39831	external
https://access.redhat.com/security/cve/CVE-2026-39833	external
https://access.redhat.com/security/cve/CVE-2026-39835	external
https://access.redhat.com/security/cve/CVE-2026-41178	external
https://access.redhat.com/security/cve/CVE-2026-42499	external
https://access.redhat.com/security/cve/CVE-2026-42502	external
https://access.redhat.com/security/cve/CVE-2026-42504	external
https://access.redhat.com/security/cve/CVE-2026-42508	external
https://access.redhat.com/security/cve/CVE-2026-44740	external
https://access.redhat.com/security/cve/CVE-2026-46595	external
https://access.redhat.com/security/cve/CVE-2026-46597	external
https://access.redhat.com/security/cve/CVE-2026-53488	external
https://access.redhat.com/security/cve/CVE-2026-53492	external
https://access.redhat.com/security/cve/CVE-2026-56852	external
https://access.redhat.com/security/cve/CVE-2026-56853	external
https://access.redhat.com/security/cve/CVE-2026-56858	external
https://access.redhat.com/security/cve/CVE-2026-56859	external
https://access.redhat.com/security/cve/CVE-2026-56860	external
https://access.redhat.com/security/cve/CVE-2026-56862	external
https://access.redhat.com/security/cve/CVE-2026-71235	external
https://access.redhat.com/security/cve/CVE-2026-75593	external
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/openshif…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-15792	self
https://bugzilla.redhat.com/show_bug.cgi?id=2503746	external
https://www.cve.org/CVERecord?id=CVE-2026-15792	external
https://nvd.nist.gov/vuln/detail/CVE-2026-15792	external
https://github.com/moby/buildkit/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-25681	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480761	external
https://www.cve.org/CVERecord?id=CVE-2026-25681	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25681	external
https://go.dev/cl/781703	external
https://go.dev/issue/79574	external
https://groups.google.com/g/golang-announce/c/iI-…	external
https://pkg.go.dev/vuln/GO-2026-5029	external
https://access.redhat.com/security/cve/CVE-2026-27136	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480757	external
https://www.cve.org/CVERecord?id=CVE-2026-27136	external
https://nvd.nist.gov/vuln/detail/CVE-2026-27136	external
https://go.dev/cl/781685	external
https://go.dev/issue/79575	external
https://pkg.go.dev/vuln/GO-2026-5030	external
https://access.redhat.com/security/cve/CVE-2026-27145	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484207	external
https://www.cve.org/CVERecord?id=CVE-2026-27145	external
https://nvd.nist.gov/vuln/detail/CVE-2026-27145	external
https://go.dev/cl/783621	external
https://go.dev/issue/79694	external
https://groups.google.com/g/golang-announce/c/tKs…	external
https://pkg.go.dev/vuln/GO-2026-5037	external
https://access.redhat.com/security/cve/CVE-2026-32283	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456338	external
https://www.cve.org/CVERecord?id=CVE-2026-32283	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32283	external
https://go.dev/cl/763767	external
https://go.dev/issue/78334	external
https://groups.google.com/g/golang-announce/c/0uY…	external
https://pkg.go.dev/vuln/GO-2026-4870	external
https://access.redhat.com/security/cve/CVE-2026-33811	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467822	external
https://www.cve.org/CVERecord?id=CVE-2026-33811	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33811	external
https://go.dev/cl/767860	external
https://go.dev/issue/78803	external
https://groups.google.com/g/golang-announce/c/qcC…	external
https://pkg.go.dev/vuln/GO-2026-4981	external
https://access.redhat.com/security/cve/CVE-2026-33818	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815	external
https://www.cve.org/CVERecord?id=CVE-2026-33818	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818	external
https://go.dev/cl/814980	external
https://go.dev/issue/80405	external
https://groups.google.com/g/golang-announce/c/94p…	external
https://pkg.go.dev/vuln/GO-2026-5972	external
https://access.redhat.com/security/cve/CVE-2026-39820	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467820	external
https://www.cve.org/CVERecord?id=CVE-2026-39820	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39820	external
https://go.dev/cl/759940	external
https://go.dev/issue/78566	external
https://pkg.go.dev/vuln/GO-2026-4986	external
https://access.redhat.com/security/cve/CVE-2026-39821	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480756	external
https://www.cve.org/CVERecord?id=CVE-2026-39821	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39821	external
https://go.dev/cl/767220	external
https://go.dev/issue/78760	external
https://pkg.go.dev/vuln/GO-2026-5026	external
https://access.redhat.com/security/cve/CVE-2026-39828	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480687	external
https://www.cve.org/CVERecord?id=CVE-2026-39828	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39828	external
https://go.dev/cl/781621	external
https://go.dev/issue/79562	external
https://groups.google.com/g/golang-announce/c/a08…	external
https://pkg.go.dev/vuln/GO-2026-5014	external
https://access.redhat.com/security/cve/CVE-2026-39829	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480681	external
https://www.cve.org/CVERecord?id=CVE-2026-39829	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39829	external
https://go.dev/cl/781641	external
https://go.dev/cl/781661	external
https://go.dev/issue/79565	external
https://pkg.go.dev/vuln/GO-2026-5018	external
https://access.redhat.com/security/cve/CVE-2026-39830	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480684	external
https://www.cve.org/CVERecord?id=CVE-2026-39830	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39830	external
https://go.dev/cl/781640	external
https://go.dev/cl/781664	external
https://go.dev/issue/79564	external
https://pkg.go.dev/vuln/GO-2026-5017	external
https://access.redhat.com/security/cve/CVE-2026-39831	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480675	external
https://www.cve.org/CVERecord?id=CVE-2026-39831	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39831	external
https://go.dev/cl/781662	external
https://go.dev/issue/79566	external
https://pkg.go.dev/vuln/GO-2026-5019	external
https://access.redhat.com/security/cve/CVE-2026-39833	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480683	external
https://www.cve.org/CVERecord?id=CVE-2026-39833	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39833	external
https://go.dev/cl/778640	external
https://go.dev/cl/778641	external
https://go.dev/issue/79436	external
https://pkg.go.dev/vuln/GO-2026-5005	external
https://access.redhat.com/security/cve/CVE-2026-39835	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480680	external
https://www.cve.org/CVERecord?id=CVE-2026-39835	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39835	external
https://go.dev/cl/781660	external
https://go.dev/issue/79563	external
https://pkg.go.dev/vuln/GO-2026-5015	external
https://access.redhat.com/security/cve/CVE-2026-41178	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484830	external
https://www.cve.org/CVERecord?id=CVE-2026-41178	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41178	external
https://github.com/open-telemetry/opentelemetry-g…	external
https://github.com/open-telemetry/opentelemetry-g…	external
https://access.redhat.com/security/cve/CVE-2026-42499	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467809	external
https://www.cve.org/CVERecord?id=CVE-2026-42499	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42499	external
https://go.dev/cl/771520	external
https://go.dev/issue/78987	external
https://pkg.go.dev/vuln/GO-2026-4977	external
https://access.redhat.com/security/cve/CVE-2026-42502	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480762	external
https://www.cve.org/CVERecord?id=CVE-2026-42502	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42502	external
https://go.dev/cl/781701	external
https://go.dev/issue/79572	external
https://pkg.go.dev/vuln/GO-2026-5027	external
https://access.redhat.com/security/cve/CVE-2026-42504	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484204	external
https://www.cve.org/CVERecord?id=CVE-2026-42504	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42504	external
https://go.dev/cl/774481	external
https://go.dev/issue/79217	external
https://pkg.go.dev/vuln/GO-2026-5038	external
https://access.redhat.com/security/cve/CVE-2026-42508	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480688	external
https://www.cve.org/CVERecord?id=CVE-2026-42508	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42508	external
https://go.dev/cl/781220	external
https://go.dev/issue/79568	external
https://pkg.go.dev/vuln/GO-2026-5021	external
https://access.redhat.com/security/cve/CVE-2026-44740	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483894	external
https://www.cve.org/CVERecord?id=CVE-2026-44740	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44740	external
https://github.com/go-git/go-billy/releases/tag/v5.9.0	external
https://github.com/go-git/go-billy/releases/tag/v…	external
https://github.com/go-git/go-billy/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-46595	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480689	external
https://www.cve.org/CVERecord?id=CVE-2026-46595	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46595	external
https://go.dev/cl/781642	external
https://go.dev/issue/79570	external
https://pkg.go.dev/vuln/GO-2026-5023	external
https://access.redhat.com/security/cve/CVE-2026-46597	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480678	external
https://www.cve.org/CVERecord?id=CVE-2026-46597	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46597	external
https://go.dev/cl/781620	external
https://go.dev/issue/79561	external
https://pkg.go.dev/vuln/GO-2026-5013	external
https://access.redhat.com/security/cve/CVE-2026-53488	self
https://bugzilla.redhat.com/show_bug.cgi?id=2495815	external
https://www.cve.org/CVERecord?id=CVE-2026-53488	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53488	external
https://github.com/containerd/containerd/security…	external
https://access.redhat.com/security/cve/CVE-2026-53492	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496130	external
https://www.cve.org/CVERecord?id=CVE-2026-53492	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53492	external
https://github.com/containerd/containerd/security…	external
https://access.redhat.com/security/cve/CVE-2026-56852	self
https://bugzilla.redhat.com/show_bug.cgi?id=2504233	external
https://www.cve.org/CVERecord?id=CVE-2026-56852	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56852	external
https://go.dev/cl/794100	external
https://go.dev/issue/80142	external
https://pkg.go.dev/vuln/GO-2026-5970	external
https://access.redhat.com/security/cve/CVE-2026-56853	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515827	external
https://www.cve.org/CVERecord?id=CVE-2026-56853	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56853	external
https://go.dev/cl/795540	external
https://go.dev/issue/80205	external
https://pkg.go.dev/vuln/GO-2026-6089	external
https://access.redhat.com/security/cve/CVE-2026-56858	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838	external
https://www.cve.org/CVERecord?id=CVE-2026-56858	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858	external
https://go.dev/cl/807100	external
https://go.dev/issue/80435	external
https://pkg.go.dev/vuln/GO-2026-6091	external
https://access.redhat.com/security/cve/CVE-2026-56859	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840	external
https://www.cve.org/CVERecord?id=CVE-2026-56859	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859	external
https://go.dev/cl/803320	external
https://go.dev/issue/80481	external
https://pkg.go.dev/vuln/GO-2026-6088	external
https://access.redhat.com/security/cve/CVE-2026-56860	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820	external
https://www.cve.org/CVERecord?id=CVE-2026-56860	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860	external
https://go.dev/cl/803681	external
https://go.dev/issue/80494	external
https://pkg.go.dev/vuln/GO-2026-6218	external
https://access.redhat.com/security/cve/CVE-2026-56862	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839	external
https://www.cve.org/CVERecord?id=CVE-2026-56862	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862	external
https://go.dev/cl/804261	external
https://go.dev/issue/80528	external
https://pkg.go.dev/vuln/GO-2026-6090	external
https://access.redhat.com/security/cve/CVE-2026-71235	self
https://bugzilla.redhat.com/show_bug.cgi?id=2511475	external
https://www.cve.org/CVERecord?id=CVE-2026-71235	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71235	external
https://github.com/absmach/magistrala	external
https://access.redhat.com/security/cve/CVE-2026-75593	self
https://bugzilla.redhat.com/show_bug.cgi?id=2519913	external
https://www.cve.org/CVERecord?id=CVE-2026-75593	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75593	external
https://github.com/moby/buildkit/releases/tag/v0.31.2	external
https://github.com/moby/buildkit/security/advisor…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A new version of OpenShift API for Data Protection (OADP) is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenShift API for Data Protection (OADP) enables you to back up and restore\napplication resources, persistent volume data, and internal container\nimages to external backup storage. OADP enables both file system-based and\nsnapshot-based backups for persistent volumes.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:66022",
        "url": "https://access.redhat.com/errata/RHSA-2026:66022"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-15792",
        "url": "https://access.redhat.com/security/cve/CVE-2026-15792"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32283"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39820"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39828"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39829"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39830"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39833"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39835"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42499"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42502"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42508"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44740"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46595"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46597"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53488"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
        "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-71235",
        "url": "https://access.redhat.com/security/cve/CVE-2026-71235"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75593",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75593"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore",
        "url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_66022.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift API for Data Protection",
    "tracking": {
      "current_release_date": "2026-09-12T07:23:13+00:00",
      "generator": {
        "date": "2026-09-12T07:23:13+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.21"
        }
      },
      "id": "RHSA-2026:66022",
      "initial_release_date": "2026-09-09T14:59:15+00:00",
      "revision_history": [
        {
          "date": "2026-09-09T14:59:15+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-09T14:59:41+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-12T07:23:13+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "OpenShift API for Data Protection 1.5",
                "product": {
                  "name": "OpenShift API for Data Protection 1.5",
                  "product_id": "OpenShift API for Data Protection 1.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "OpenShift API for Data Protection"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3Ae495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1788860076"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3Ab7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1788859288"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1788901553"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1788859896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1788863730"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-rhel9-operator@sha256%3Af84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1788901633"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-operator-bundle@sha256%3Ae4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1788902327"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-rhel9@sha256%3A6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1788860461"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1788859276"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1788859285"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1788859287"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Ab503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1788859282"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1788859710"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1788860076"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3A1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1788859288"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1788901553"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1788859896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1788863730"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-rhel9-operator@sha256%3Af1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1788901633"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-rhel9@sha256%3Aae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1788860461"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1788859276"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Ad926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1788859285"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Aba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1788859287"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Adcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1788859282"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Ad3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1788859710"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3Abfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1788860076"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3Aadc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1788859288"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1788901553"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1788859896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3Aba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1788863730"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-rhel9-operator@sha256%3A05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1788901633"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-rhel9@sha256%3A04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1788860461"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1788859276"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1788859285"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Ad90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1788859287"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1788859282"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Aaa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1788859710"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3Ac9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1788860076"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3Af3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1788859288"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1788901553"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ac2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1788859896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1788863730"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ad93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1788901633"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-rhel9@sha256%3A3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1788860461"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1788859276"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1788859285"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1788859287"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1788859282"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
                "product": {
                  "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
                  "product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1788859710"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 as a component of OpenShift API for Data Protection 1.5",
          "product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        },
        "product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64",
        "relates_to_product_reference": "OpenShift API for Data Protection 1.5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-15792",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-07-21T17:01:51.555730+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2503746"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service (DoS), making the BuildKit service unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "BuildKit is used by several Red Hat products to build container images. This issue allows a malicious BuildKit frontend or client to cause the BuildKit build process to crash. Exploiting this issue requires the ability to supply a build definition (for example, a Dockerfile specifying a custom #syntax frontend) to a BuildKit-based build; it does not allow remote code execution or exposure of data. The issue is fixed upstream in BuildKit version 0.31.2. Red Hat Hardened Images (Buildah, Podman, and Trivy) has already shipped the fixed version. Other affected Red Hat products are being assessed and will ship the fixed version of BuildKit in upcoming releases.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15792"
        },
        {
          "category": "external",
          "summary": "RHBZ#2503746",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503746"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15792",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15792"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15792",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15792"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6",
          "url": "https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6"
        }
      ],
      "release_date": "2026-07-21T16:10:21.395000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Avoid building container images using BuildKit frontends from untrusted sources. A BuildKit frontend is typically specified using a \"# syntax\" directive at the top of a Dockerfile, or with the \"--frontend\" option to the \"buildctl build\" command. Only use frontend images that come from a trusted source.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request"
    },
    {
      "cve": "CVE-2026-25681",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:08.177603+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781703",
          "url": "https://go.dev/cl/781703"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79574",
          "url": "https://go.dev/issue/79574"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5029",
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "release_date": "2026-05-22T15:01:21.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
    },
    {
      "cve": "CVE-2026-27136",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:00:56.609820+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781685",
          "url": "https://go.dev/cl/781685"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79575",
          "url": "https://go.dev/issue/79575"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5030",
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "release_date": "2026-05-22T15:01:22.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
    },
    {
      "cve": "CVE-2026-27145",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-02T23:01:08.992540+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484207"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484207",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/783621",
          "url": "https://go.dev/cl/783621"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79694",
          "url": "https://go.dev/issue/79694"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5037",
          "url": "https://pkg.go.dev/vuln/GO-2026-5037"
        }
      ],
      "release_date": "2026-06-02T22:01:36.954000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
    },
    {
      "cve": "CVE-2026-32283",
      "cwe": {
        "id": "CWE-764",
        "name": "Multiple Locks of a Critical Resource"
      },
      "discovery_date": "2026-04-08T02:01:16.213799+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456338"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456338",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763767",
          "url": "https://go.dev/cl/763767"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78334",
          "url": "https://go.dev/issue/78334"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4870",
          "url": "https://pkg.go.dev/vuln/GO-2026-4870"
        }
      ],
      "release_date": "2026-04-08T01:06:57.670000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
    },
    {
      "cve": "CVE-2026-33811",
      "cwe": {
        "id": "CWE-1341",
        "name": "Multiple Releases of Same Resource or Handle"
      },
      "discovery_date": "2026-05-07T20:01:34.913869+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467822"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467822",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767860",
          "url": "https://go.dev/cl/767860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78803",
          "url": "https://go.dev/issue/78803"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4981",
          "url": "https://pkg.go.dev/vuln/GO-2026-4981"
        }
      ],
      "release_date": "2026-05-07T19:41:19.285000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
    },
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-39820",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-05-07T20:01:27.800929+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/759940",
          "url": "https://go.dev/cl/759940"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78566",
          "url": "https://go.dev/issue/78566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4986",
          "url": "https://pkg.go.dev/vuln/GO-2026-4986"
        }
      ],
      "release_date": "2026-05-07T19:41:19.854000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
    },
    {
      "cve": "CVE-2026-39821",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-05-22T16:00:52.844126+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767220",
          "url": "https://go.dev/cl/767220"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78760",
          "url": "https://go.dev/issue/78760"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5026",
          "url": "https://pkg.go.dev/vuln/GO-2026-5026"
        }
      ],
      "release_date": "2026-05-22T15:01:21.462000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
    },
    {
      "cve": "CVE-2026-39828",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "discovery_date": "2026-05-22T04:01:46.775641+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480687"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39828"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480687",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781621",
          "url": "https://go.dev/cl/781621"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79562",
          "url": "https://go.dev/issue/79562"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5014",
          "url": "https://pkg.go.dev/vuln/GO-2026-5014"
        }
      ],
      "release_date": "2026-05-22T02:31:26.883000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
    },
    {
      "cve": "CVE-2026-39829",
      "cwe": {
        "id": "CWE-1284",
        "name": "Improper Validation of Specified Quantity in Input"
      },
      "discovery_date": "2026-05-22T04:01:30.092249+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480681"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39829"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480681",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781641",
          "url": "https://go.dev/cl/781641"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781661",
          "url": "https://go.dev/cl/781661"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79565",
          "url": "https://go.dev/issue/79565"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5018",
          "url": "https://pkg.go.dev/vuln/GO-2026-5018"
        }
      ],
      "release_date": "2026-05-22T02:31:27.324000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
    },
    {
      "cve": "CVE-2026-39830",
      "cwe": {
        "id": "CWE-772",
        "name": "Missing Release of Resource after Effective Lifetime"
      },
      "discovery_date": "2026-05-22T04:01:38.517202+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480684"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39830"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480684",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781640",
          "url": "https://go.dev/cl/781640"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781664",
          "url": "https://go.dev/cl/781664"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79564",
          "url": "https://go.dev/issue/79564"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5017",
          "url": "https://pkg.go.dev/vuln/GO-2026-5017"
        }
      ],
      "release_date": "2026-05-22T02:31:27.208000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
    },
    {
      "cve": "CVE-2026-39831",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-05-22T04:01:12.861178+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480675"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480675",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781662",
          "url": "https://go.dev/cl/781662"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79566",
          "url": "https://go.dev/issue/79566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5019",
          "url": "https://pkg.go.dev/vuln/GO-2026-5019"
        }
      ],
      "release_date": "2026-05-22T02:31:27.436000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
    },
    {
      "cve": "CVE-2026-39833",
      "cwe": {
        "id": "CWE-358",
        "name": "Improperly Implemented Security Check for Standard"
      },
      "discovery_date": "2026-05-22T04:01:35.714593+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480683"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39833"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480683",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/778640",
          "url": "https://go.dev/cl/778640"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/778641",
          "url": "https://go.dev/cl/778641"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79436",
          "url": "https://go.dev/issue/79436"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5005",
          "url": "https://pkg.go.dev/vuln/GO-2026-5005"
        }
      ],
      "release_date": "2026-05-22T02:31:26.294000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
    },
    {
      "cve": "CVE-2026-39835",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-05-22T04:01:27.279943+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480680"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480680",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781660",
          "url": "https://go.dev/cl/781660"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79563",
          "url": "https://go.dev/issue/79563"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5015",
          "url": "https://pkg.go.dev/vuln/GO-2026-5015"
        }
      ],
      "release_date": "2026-05-22T02:31:26.982000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
    },
    {
      "cve": "CVE-2026-41178",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-04T16:01:10.300537+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
          "url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
          "url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
        }
      ],
      "release_date": "2026-06-04T14:38:23.707000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
    },
    {
      "cve": "CVE-2026-42499",
      "cwe": {
        "id": "CWE-1046",
        "name": "Creation of Immutable Text Using String Concatenation"
      },
      "discovery_date": "2026-05-07T20:00:51.685602+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467809"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467809",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/771520",
          "url": "https://go.dev/cl/771520"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78987",
          "url": "https://go.dev/issue/78987"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4977",
          "url": "https://pkg.go.dev/vuln/GO-2026-4977"
        }
      ],
      "release_date": "2026-05-07T19:41:18.615000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
    },
    {
      "cve": "CVE-2026-42502",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:11.151484+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480762"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480762",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781701",
          "url": "https://go.dev/cl/781701"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79572",
          "url": "https://go.dev/issue/79572"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5027",
          "url": "https://pkg.go.dev/vuln/GO-2026-5027"
        }
      ],
      "release_date": "2026-05-22T15:01:21.649000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
    },
    {
      "cve": "CVE-2026-42504",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-06-02T23:01:00.320527+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484204"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484204",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/774481",
          "url": "https://go.dev/cl/774481"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79217",
          "url": "https://go.dev/issue/79217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5038",
          "url": "https://pkg.go.dev/vuln/GO-2026-5038"
        }
      ],
      "release_date": "2026-06-02T22:01:37.219000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
    },
    {
      "cve": "CVE-2026-42508",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-05-22T04:01:49.515058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480688"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42508"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480688",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781220",
          "url": "https://go.dev/cl/781220"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79568",
          "url": "https://go.dev/issue/79568"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5021",
          "url": "https://pkg.go.dev/vuln/GO-2026-5021"
        }
      ],
      "release_date": "2026-05-22T02:31:27.644000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
    },
    {
      "cve": "CVE-2026-44740",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-01T17:01:53.685793+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483894"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483894",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
          "url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
          "url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
          "url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
        }
      ],
      "release_date": "2026-06-01T16:04:50.358000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
    },
    {
      "cve": "CVE-2026-46595",
      "cwe": {
        "id": "CWE-303",
        "name": "Incorrect Implementation of Authentication Algorithm"
      },
      "discovery_date": "2026-05-22T04:01:52.215134+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480689"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46595"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480689",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781642",
          "url": "https://go.dev/cl/781642"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79570",
          "url": "https://go.dev/issue/79570"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5023",
          "url": "https://pkg.go.dev/vuln/GO-2026-5023"
        }
      ],
      "release_date": "2026-05-22T02:31:27.894000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
    },
    {
      "cve": "CVE-2026-46597",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "discovery_date": "2026-05-22T04:01:21.721980+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480678"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480678",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781620",
          "url": "https://go.dev/cl/781620"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79561",
          "url": "https://go.dev/issue/79561"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5013",
          "url": "https://pkg.go.dev/vuln/GO-2026-5013"
        }
      ],
      "release_date": "2026-05-22T02:31:26.754000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
    },
    {
      "cve": "CVE-2026-53488",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-07-01T02:01:09.589815+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2495815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "RHBZ#2495815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
        }
      ],
      "release_date": "2026-07-01T00:11:20.610000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
    },
    {
      "cve": "CVE-2026-53492",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-07-01T19:01:34.238078+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496130"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496130",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
        }
      ],
      "release_date": "2026-07-01T17:59:12.552000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
    },
    {
      "cve": "CVE-2026-56852",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:56.266823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/794100",
          "url": "https://go.dev/cl/794100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80142",
          "url": "https://go.dev/issue/80142"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5970",
          "url": "https://pkg.go.dev/vuln/GO-2026-5970"
        }
      ],
      "release_date": "2026-07-21T19:18:59.951000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
    },
    {
      "cve": "CVE-2026-56853",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:14:53.561638+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515827"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515827",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/795540",
          "url": "https://go.dev/cl/795540"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80205",
          "url": "https://go.dev/issue/80205"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6089",
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "release_date": "2026-08-13T21:58:53.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
    },
    {
      "cve": "CVE-2026-56858",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:32.034590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515838"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515838",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/807100",
          "url": "https://go.dev/cl/807100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80435",
          "url": "https://go.dev/issue/80435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6091",
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "release_date": "2026-08-13T21:58:53.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-56860",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:13:18.319384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803681",
          "url": "https://go.dev/cl/803681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80494",
          "url": "https://go.dev/issue/80494"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6218",
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "release_date": "2026-08-13T21:58:53.731000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
    },
    {
      "cve": "CVE-2026-56862",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-08-13T22:16:41.928450+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/804261",
          "url": "https://go.dev/cl/804261"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80528",
          "url": "https://go.dev/issue/80528"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6090",
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "release_date": "2026-08-13T21:58:53.216000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
    },
    {
      "cve": "CVE-2026-71235",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-08-05T12:07:04.533964+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511475"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Magistrala\u0027s Rules Engine. An authenticated low-privileged user can exploit this vulnerability by creating rules with embedded Go or Lua scripts. These scripts are executed server-side without sufficient validation, allowing for arbitrary file read and write operations, access to internal databases, and Server-Side Request Forgery (SSRF) against internal microservices. This could lead to significant data compromise and unauthorized system access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/absmach/magistrala: Magistrala IoT Platform: Arbitrary Code Execution via Unrestricted Script Execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-71235"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511475",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511475"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-71235",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-71235"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71235",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71235"
        },
        {
          "category": "external",
          "summary": "https://github.com/absmach/magistrala",
          "url": "https://github.com/absmach/magistrala"
        }
      ],
      "release_date": "2026-08-05T10:56:25.198000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/absmach/magistrala: Magistrala IoT Platform: Arbitrary Code Execution via Unrestricted Script Execution"
    },
    {
      "cve": "CVE-2026-75593",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-08-19T20:21:08.000514+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519913"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. A malicious client with valid permissions to access the BuildKit control API can craft a special upload request. This request allows files to escape from the BuildKit-controlled state directory, potentially leading to unauthorized modification or deletion of files on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw in BuildKit allows a client with valid permissions to the BuildKit control API to perform unauthorized file modifications outside the intended build state directory. This issue is limited to authenticated clients, reducing the overall attack surface.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
        ],
        "known_not_affected": [
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
          "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75593"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519913",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519913"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75593",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75593"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75593",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75593"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/buildkit/releases/tag/v0.31.2",
          "url": "https://github.com/moby/buildkit/releases/tag/v0.31.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/buildkit/security/advisories/GHSA-g2h8-426c-7976",
          "url": "https://github.com/moby/buildkit/security/advisories/GHSA-g2h8-426c-7976"
        }
      ],
      "release_date": "2026-08-19T20:06:54.924000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-09T14:59:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:66022"
        },
        {
          "category": "workaround",
          "details": "Restrict access to the BuildKit control API to only trusted users and services. Implement robust authentication and authorization policies for all clients interacting with the BuildKit daemon to prevent unauthorized access and potential file system escapes.",
          "product_ids": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
            "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification"
    }
  ]
}

CVE-2026-15792 (GCVE-0-2026-15792)

Vulnerability from cvelistv5 – Published: 2026-07-21 16:10 – Updated: 2026-07-21 17:01

Title

Possible panic when incorrect parameters sent from frontend

Summary

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-21 17:01 UTC

CWE

CWE-20 - Improper Input Validation

Assigner

Docker mitre root

References

1 reference

URL	Tags
https://github.com/moby/buildkit/security/advisor…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
moby	BuildKit	Affected: 0 , < 0.31.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15792",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-21T17:01:19.161414Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-21T17:01:55.840Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "MacOS",
            "Windows"
          ],
          "product": "BuildKit",
          "vendor": "moby",
          "versions": [
            {
              "lessThan": "0.31.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic."
            }
          ],
          "value": "A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-153",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-153 Input Data Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-21T16:10:21.395Z",
        "orgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e",
        "shortName": "Docker"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Possible panic when incorrect parameters sent from frontend",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Avoid using BuildKit frontends from untrusted sources. A frontend image is usually specified as the #syntax line on your Dockerfile, or with --frontend flag when using buildctl build command."
            }
          ],
          "value": "Avoid using BuildKit frontends from untrusted sources. A frontend image is usually specified as the #syntax line on your Dockerfile, or with --frontend flag when using buildctl build command."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e",
    "assignerShortName": "Docker",
    "cveId": "CVE-2026-15792",
    "datePublished": "2026-07-21T16:10:21.395Z",
    "dateReserved": "2026-07-14T19:31:00.046Z",
    "dateUpdated": "2026-07-21T17:01:55.840Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25681 (GCVE-0-2026-25681)

Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-05-22 17:46

Title

Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html

Summary

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 17:46 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/79574
https://groups.google.com/g/golang-announce/c/iI-…
https://go.dev/cl/781703
https://pkg.go.dev/vuln/GO-2026-5029

Impacted products

1 product

Vendor	Product	Version
golang.org/x/net	golang.org/x/net/html	Affected: 0 , < 0.55.0 (semver)

Credits

ensy

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-25681",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T17:46:00.775026Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T17:46:20.366Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/html",
          "product": "golang.org/x/net/html",
          "programRoutines": [
            {
              "name": "parser.parse"
            },
            {
              "name": "Parse"
            },
            {
              "name": "ParseFragment"
            },
            {
              "name": "ParseFragmentWithOptions"
            },
            {
              "name": "ParseWithOptions"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.55.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ensy"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T15:01:21.975Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79574"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "url": "https://go.dev/cl/781703"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "title": "Invoking  incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-25681",
    "datePublished": "2026-05-22T15:01:21.975Z",
    "dateReserved": "2026-02-05T01:35:43.738Z",
    "dateUpdated": "2026-05-22T17:46:20.366Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-27136 (GCVE-0-2026-27136)

Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-05-22 16:59

Title

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Summary

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 16:59 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/79575
https://groups.google.com/g/golang-announce/c/iI-…
https://go.dev/cl/781685
https://pkg.go.dev/vuln/GO-2026-5030

Impacted products

1 product

Vendor	Product	Version
golang.org/x/net	golang.org/x/net/html	Affected: 0 , < 0.55.0 (semver)

Credits

ensy

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-27136",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T16:59:35.355098Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T16:59:52.807Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/html",
          "product": "golang.org/x/net/html",
          "programRoutines": [
            {
              "name": "parser.parse"
            },
            {
              "name": "Parse"
            },
            {
              "name": "ParseFragment"
            },
            {
              "name": "ParseFragmentWithOptions"
            },
            {
              "name": "ParseWithOptions"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.55.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ensy"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T15:01:22.111Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79575"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "url": "https://go.dev/cl/781685"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "title": "Invoking  duplicate attributes can cause XSS in golang.org/x/net/html"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-27136",
    "datePublished": "2026-05-22T15:01:22.111Z",
    "dateReserved": "2026-02-17T19:57:28.434Z",
    "dateUpdated": "2026-05-22T16:59:52.807Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-27145 (GCVE-0-2026-27145)

Vulnerability from cvelistv5 – Published: 2026-06-02 22:01 – Updated: 2026-09-11 12:09

Title

Inefficient candidate hostname parsing in crypto/x509

Summary

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-04 12:34 UTC

CWE

CWE-407 - Inefficient Algorithmic Complexity
CWE-606 - Unchecked Input for Loop Condition

Assigner

Go Google root

References

98 references

URL	Tags
https://go.dev/cl/783621
https://go.dev/issue/79694
https://groups.google.com/g/golang-announce/c/tKs…
https://pkg.go.dev/vuln/GO-2026-5037
https://access.redhat.com/security/cve/CVE-2026-27145	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2484207	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:42079	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42080	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53416	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57482	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42082	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42150	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42240	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49703	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49702	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53413	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53374	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54168	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51187	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29980	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35832	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34357	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39005	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42946	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39573	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:38995	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41930	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61253	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60354	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57649	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60315	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53415	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54401	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29981	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34359	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39879	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36317	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61314	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54500	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41030	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44622	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47149	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53530	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:52946	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51057	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47737	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60390	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60388	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54427	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60391	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60386	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42142	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33574	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23264	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54441	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42644	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36648	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41036	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60025	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57488	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54603	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49705	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49729	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49744	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49765	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49770	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50205	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36797	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42047	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42050	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42051	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42049	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55899	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54435	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54525	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59556	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59593	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59557	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54432	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59579	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59558	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47735	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59559	vendor-advisoryx_refsource_REDHAT

Impacted products

229 products

Vendor	Product	Version
Go standard library	crypto/x509	Affected: 0 , < 1.25.11 (semver) Affected: 1.26.0-0 , < 1.26.4 (semver)
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:1.6.7-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:1.6.7-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el10
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.26.4-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.152.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.9.27-7.el10_2.2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 1:0.3.8-6.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.4.9.2-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.2.10-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.0-4.el10_2.5 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.1-2.el10_2.3 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.26.5-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.26.1-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.4.7-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 1:0.3.2-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.152.1-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.2.3-6.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:1.4.0-8.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260710105056.a3795dee , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 1:0.2.5-9.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.26.4-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.152.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:1.22.2-7.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:0.2.7-8.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:0.2.2-1.el9_2.4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:0.152.1-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 1:0.2.4-9.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:1.26.5-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:0.152.1-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 1:0.2.7-1.el9_6.5 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:0.23.0-5.rhaos4.18.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenStack Platform 16.2	Unaffected: 0:0.2.1-1.1.el8ost , < * (rpm) cpe:/a:redhat:openstack:16.2::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 8	Unaffected: 0:0.0.4-1.el8sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el9
Red Hat	Red Hat Satellite 6.17 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.17::el9
Red Hat	Red Hat Satellite 6.18 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Streams for Apache Kafka 3.2.1	Unaffected: danielqsj-kafka_exporter , < * (rpm) cpe:/a:redhat:amq_streams:3.2::el9
Red Hat	Cert Manager support for Red Hat OpenShift release 1.19	Unaffected: 1786613805 , < * (rpm) cpe:/a:redhat:cert_manager:1.19::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1787593946 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Compliance Operator 1	Unaffected: 1786380082 , < * (rpm) cpe:/a:redhat:openshift_compliance_operator:1::el9
Red Hat	external secrets operator for Red Hat OpenShift 1.1	Unaffected: 1786614676 , < * (rpm) cpe:/a:redhat:external_secrets_operator:1.1::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1786549223 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1787201612 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1786764622 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1787176886 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911941 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911952 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911945 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786912006 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911973 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911950 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911984 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786907276 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787238383 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787239116 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787239595 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786577950 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786750700 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786983362 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786664288 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787259112 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787264185 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787259740 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787260821 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784737366 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784738758 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784677239 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259015 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259059 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259011 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259016 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787258993 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259044 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259047 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259108 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259099 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259126 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259114 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259113 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787195995 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787201646 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1786764601 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787176716 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Multicluster Global Hub 1.4.5	Unaffected: 1784061472 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.4::el9
Red Hat	Multicluster Global Hub 1.6.5	Unaffected: 1784152046 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.6::el9
Red Hat	Multicluster Global Hub 1.7.0	Unaffected: 1784768332 , < * (rpm) Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9
Red Hat	Multicluster Global Hub 1.8.0	Unaffected: 1785763319 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.8::el9
Red Hat	OpenShift API for Data Protection 1.5	Unaffected: 1788860461 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.5::el9
Red Hat	OpenShift Developer Tools and Services 1.6.3	Unaffected: 1784727697 , < * (rpm) cpe:/a:redhat:source_to_image:1.6::el8
Red Hat	OpenShift Developer Tools and Services 1.6.3	Unaffected: 1784728036 , < * (rpm) cpe:/a:redhat:source_to_image:1.6::el8
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787260689 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787262214 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787260663 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787263584 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784677172 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784638644 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784590741 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787259106 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787259284 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787259310 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787263693 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1787183407 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1786976940 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1787172840 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1787170830 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1786547792 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1786547807 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1786549537 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787252179 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787242135 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787242105 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787242321 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787243221 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787242131 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787242099 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787242108 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788105072 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1783917963 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1782767215 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Hardened Images	Unaffected: 1.25.11-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 1.26.4-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Lightspeed (formerly Insights) for Runtimes 1.0	Unaffected: 1786483782 , < * (rpm) cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1784004914 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057868 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1784121108 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1783612119 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1787554347 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1786754425 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1786526139 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1785704636 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1785704547 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1784885742 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1784885559 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1784908682 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1784917979 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1784885281 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1784885133 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1784953556 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1784918113 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1784921753 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1784921772 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1784953743 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1784918117 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1784885810 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1784885681 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1784908639 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1785316150 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.4	Unaffected: 1785131046 , < * (rpm) cpe:/a:redhat:service_mesh:3.4::el9
Red Hat	Red Hat OpenShift Service Mesh 3.4	Unaffected: 1785131063 , < * (rpm) cpe:/a:redhat:service_mesh:3.4::el9
Red Hat	Red Hat OpenShift Service Mesh 3.4	Unaffected: 1785131291 , < * (rpm) cpe:/a:redhat:service_mesh:3.4::el9
Red Hat	Red Hat OpenShift Service Mesh 3.4	Unaffected: 1785317214 , < * (rpm) cpe:/a:redhat:service_mesh:3.4::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 4-1.4.2 , < * (rpm) Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Web Terminal 1.11	Unaffected: 1784296203 , < * (rpm) cpe:/a:redhat:webterminal:1.11::el9
Red Hat	Red Hat Web Terminal 1.12	Unaffected: 1784247610 , < * (rpm) cpe:/a:redhat:webterminal:1.12::el9
Red Hat	Red Hat Web Terminal 1.13	Unaffected: 1784296127 , < * (rpm) cpe:/a:redhat:webterminal:1.13::el9
Red Hat	Red Hat Web Terminal 1.14	Unaffected: 1784296114 , < * (rpm) cpe:/a:redhat:webterminal:1.14::el9
Red Hat	Red Hat Web Terminal 1.15	Unaffected: 1784296033 , < * (rpm) cpe:/a:redhat:webterminal:1.15::el9
Red Hat	Red Hat Web Terminal 1.16	Unaffected: 1786654871 , < * (rpm) cpe:/a:redhat:webterminal:1.16::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
Red Hat	Deployment Validation Operator	cpe:/a:redhat:deployment_validator_operator
Red Hat	ExternalDNS Operator	cpe:/a:redhat:ext_dns_optr:1
Red Hat	Fence Agents Remediation Operator	cpe:/a:redhat:workload_availability_far:0
Red Hat	File Integrity Operator	cpe:/a:redhat:openshift_file_integrity_operator:1
Red Hat	Gatekeeper 3	cpe:/a:redhat:gatekeeper:3
Red Hat	Logging Subsystem for Red Hat OpenShift	cpe:/a:redhat:logging:6
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4
Red Hat	Machine Deletion Remediation Operator	cpe:/a:redhat:workload_availability_mdr:0
Red Hat	Migration Toolkit for Applications 8	cpe:/a:redhat:migration_toolkit_applications:8
Red Hat	Migration Toolkit for Containers	cpe:/a:redhat:rhmt:1
Red Hat	mirror registry for Red Hat OpenShift 2	cpe:/a:redhat:mirror_registry:2
Red Hat	Multiarch Tuning Operator	cpe:/a:redhat:multiarch_tuning_operator
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	Node HealthCheck Operator	cpe:/a:redhat:workload_availability_nhc:0
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Power monitoring for Red Hat OpenShift	cpe:/a:redhat:openshift_power_monitoring
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ceph Storage 5	cpe:/a:redhat:ceph_storage:5
Red Hat	Red Hat Ceph Storage 6	cpe:/a:redhat:ceph_storage:6
Red Hat	Red Hat Ceph Storage 7	cpe:/a:redhat:ceph_storage:7
Red Hat	Red Hat Ceph Storage 8	cpe:/a:redhat:ceph_storage:8
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Connectivity Link 1	cpe:/a:redhat:connectivity_link:1
Red Hat	Red Hat Edge Manager 1	cpe:/a:redhat:edge_manager:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Cluster Manager CLI	cpe:/a:redhat:openshift_cluster_manager_cli:1
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Openshift Data Foundation 4	cpe:/a:redhat:openshift_data_foundation:4
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift Dev Workspaces Operator	cpe:/a:redhat:devworkspace
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift on AWS	cpe:/a:redhat:openshift_service_on_aws:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Service Interconnect 2	cpe:/a:redhat:service_interconnect:2
Red Hat	Security Profiles Operator	cpe:/a:redhat:openshift_security_profiles_operator:1
Red Hat	Service Telemetry Framework 1.5	cpe:/a:redhat:stf:1.5
Red Hat	streams for Apache Kafka 2	cpe:/a:redhat:amq_streams:2
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1
Red Hat	Zero Trust Workload Identity Manager - Tech Preview	cpe:/a:redhat:zero_trust_workload_identity_manager:0

Credits

Jakub Ciolek - https://ciolek.dev/

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-27145",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-04T12:34:03.859208Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-04T12:34:53.136Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.7-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.7-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.4-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openprinting-ipp-usb",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.9.27-7.el10_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.8-6.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.9.2-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.10-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-client",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.0-4.el10_2.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-server",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.1-2.el10_2.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.1-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.7-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.2-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.3-6.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "host-metering",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.4.0-8.el7_9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "go-toolset:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260710105056.a3795dee",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.5-9.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.4-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.22.2-7.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-8.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.2-1.el9_2.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.4-9.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-1.el9_6.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.23.0-5.rhaos4.18.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "collectd-sensubility",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.1-1.1.el8ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el8sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.17 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.18 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.19 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github",
            "product": "Streams for Apache Kafka 3.2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "danielqsj-kafka_exporter",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "Cert Manager support for Red Hat OpenShift release 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786613805",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/perses-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787593946",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_compliance_operator:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "Compliance Operator 1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786380082",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "external secrets operator for Red Hat OpenShift 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786614676",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786549223",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787201612",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786764622",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787176886",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/addon-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911941",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/backplane-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911952",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911945",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786912006",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911973",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/multicloud-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911950",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/placement-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911984",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-operator-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911984",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/work-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786907276",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787238383",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787239116",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787239595",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786577950",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786750700",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786983362",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786664288",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259112",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787264185",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259740",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787260821",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/backplane-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784737366",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784738758",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784677239",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/addon-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259015",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259059",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259011",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259016",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787258993",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259044",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/multicloud-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259047",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/placement-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259099",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-operator-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259126",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/work-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259113",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787195995",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787201646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786764601",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787176716",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.4.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784061472",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784152046",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.7.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784768332",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785775948",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.8.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785763319",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788860461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:source_to_image:1.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "source-to-image/source-to-image-rhel8",
            "product": "OpenShift Developer Tools and Services 1.6.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784727697",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:source_to_image:1.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "source-to-image/source-to-image-rhel9",
            "product": "OpenShift Developer Tools and Services 1.6.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784728036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787260689",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787262214",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787260663",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787263584",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/kube-rbac-proxy-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784677172",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multiclusterhub-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784638644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-observability-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784590741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259106",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259284",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259310",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787263693",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787183407",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786976940",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787172840",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787170830",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786547792",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786547807",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786549537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787252179",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242135",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242105",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242321",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787243221",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242131",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242099",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/subctl-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788105072",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783917963",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-rhel9-operator",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782767215",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-25-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.25.11-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-26-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.26.4-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
            "product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786483782",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhel9-operator",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784004914",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057868",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-rhel9-operator",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784121108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783612119",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787554347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786754425",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786526139",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-collector-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785704636",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785704547",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885742",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784908682",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784917979",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885281",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885133",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784953556",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784918113",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784921753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784921772",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784953743",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784918117",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885810",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885681",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784908639",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785316150",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785131046",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785131063",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785131291",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785317214",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "conforma-cli-stack-v1",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.2",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296203",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784247610",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296127",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296033",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786654871",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/assisted-installer-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "build-of-trustee/trustee-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
            "product": "Custom Metric Autoscaler operator for Red Hat Openshift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:deployment_validator_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "dvo/deployment-validation-rhel8-operator",
            "product": "Deployment Validation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9-operator",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/fence-agents-remediation-rhel8-operator",
            "product": "Fence Agents Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_file_integrity_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "File Integrity Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "gatekeeper/gatekeeper-rhel9-operator",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-rhel9-operator",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel8",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel9",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/machine-deletion-remediation-rhel8-operator",
            "product": "Machine Deletion Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Migration Toolkit for Applications 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-registry-rhel8",
            "product": "Migration Toolkit for Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:mirror_registry:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift/mirror-registry-rhel8",
            "product": "mirror registry for Red Hat OpenShift 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multiarch_tuning_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
            "product": "Multiarch Tuning Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "unaffected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hive-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/maestro-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-cli-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "unaffected",
            "packageName": "helm",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines-client",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-scheduler-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kn-workflow-plugin",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-serverless-1/logic-rhel9-operator",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-clients",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rh-osbs/openshift-golang-builder",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_power_monitoring"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-power-monitoring/kepler-rhel9",
            "product": "Power monitoring for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/3scale-rhel7-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/3scale-rhel9-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-volsync-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/config-policy-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/governance-policy-propagator-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/thanos-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel9",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform/platform-operator-bundle",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl30",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl32",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3x-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:5"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/snmp-notifier-rhel8",
            "product": "Red Hat Ceph Storage 5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/snmp-notifier-rhel9",
            "product": "Red Hat Ceph Storage 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhceph/grafana-rhel9",
            "product": "Red Hat Ceph Storage 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhceph/grafana-rhel9",
            "product": "Red Hat Ceph Storage 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhceph/alloy-rhel10",
            "product": "Red Hat Ceph Storage 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/authorino-rhel9",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/coredns-rhel9",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "Red Hat Edge Manager 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel10/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhc-worker-script",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/buildah",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/conmon",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/podman",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/runc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/skopeo",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/toolbox",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel9/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "runc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-rhel8-operator",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/rhai-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_cluster_manager_cli:1"
            ],
            "defaultStatus": "affected",
            "packageName": "ocm-cli-clients/ocm-cli-rhel9",
            "product": "Red Hat OpenShift Cluster Manager CLI",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon-rs",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-prometheus-promu",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ignition",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kata-containers",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/frr-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-cli",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-kuryr",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-crio-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-osbs/openshift-golang-builder",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "runc",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "devspaces/udi-rhel9",
            "product": "Red Hat OpenShift Dev Spaces",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:devworkspace"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-rhel9-operator",
            "product": "Red Hat OpenShift Dev Workspaces Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosdt/tempo-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-gitops-1/dex-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-gitops-1/dex-rhel9",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_service_on_aws:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rosa",
            "product": "Red Hat OpenShift on AWS",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-redfish-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kubevirt",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-osbs/openshift-golang-builder",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "collectd-libpod-stats",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-rhel9/osp-director-agent",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openstack-k8s-operators-os-diff",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoso-operators/sg-core-rhel9",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite:el8/yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-selinuxd-rhel8",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:stf:1.5"
            ],
            "defaultStatus": "unaffected",
            "packageName": "stf/sg-core-rhel9",
            "product": "Service Telemetry Framework 1.5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-danielqsj-kafka_exporter",
            "product": "streams for Apache Kafka 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-02T22:01:36.954Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-606",
                "description": "Unchecked Input for Loop Condition",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:09:12.800Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
          },
          {
            "name": "RHBZ#2484207",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42079"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42080"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53416"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54757"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57482"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42082"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42150"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42240"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49703"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49702"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53413"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53374"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54168"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51187"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46394"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46395"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29980"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35832"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34357"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39005"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42946"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39573"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:38995"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41930"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61253"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60354"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57649"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53412"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60315"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53415"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54401"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29981"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34359"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39879"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36317"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61314"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54500"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41030"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44622"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47149"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53530"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:52946"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51057"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47737"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60390"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60388"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54427"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60391"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60386"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63016"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42142"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33574"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23264"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54441"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42644"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36648"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41036"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60025"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57488"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54603"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49705"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49729"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49744"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49765"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49770"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50205"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36797"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42043"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42047"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42050"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42051"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42049"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55899"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54435"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54525"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59556"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59593"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59557"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54432"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59579"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59558"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47735"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59559"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53416: Red Hat Enterprise Linux Server (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57482: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46394: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29980: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29981: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36317: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61314: Cluster Observability Operator 1.5.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54500: Compliance Operator 1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44622: Multicluster Global Hub 1.6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:52946: Multicluster Global Hub 1.8.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66022: OpenShift API for Data Protection 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60390: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60388: Red Hat Advanced Cluster Management for Kubernetes 2.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54427: Red Hat Advanced Cluster Management for Kubernetes 2.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60391: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63016: Red Hat Advanced Cluster Management for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23262: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23264: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60025: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57488: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49705: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49729: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49744: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49765: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49770: Red Hat OpenShift Service Mesh 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55899: Red Hat Web Terminal 1.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54525: external secrets operator for Red Hat OpenShift 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59556: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59593: multicluster engine for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59557: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54432: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59579: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59558: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59559: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-02T23:01:08.992Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-02T22:01:36.954Z",
            "value": "Made public."
          }
        ],
        "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
        "workarounds": [
          {
            "lang": "en",
            "value": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037)."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "HostnameError.Error"
            },
            {
              "name": "matchHostnames"
            },
            {
              "name": "Certificate.Verify"
            },
            {
              "name": "Certificate.VerifyHostname"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.11",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.4",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek - https://ciolek.dev/"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-02T22:01:36.954Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/783621"
        },
        {
          "url": "https://go.dev/issue/79694"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5037"
        }
      ],
      "title": "Inefficient candidate hostname parsing in crypto/x509"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-27145",
    "datePublished": "2026-06-02T22:01:36.954Z",
    "dateReserved": "2026-02-17T19:57:28.435Z",
    "dateUpdated": "2026-09-11T12:09:12.800Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-32283 (GCVE-0-2026-32283)

Vulnerability from cvelistv5 – Published: 2026-04-08 01:06 – Updated: 2026-09-11 12:09

Title

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Summary

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-13 17:51 UTC

CWE

CWE-667 - Improper Locking
CWE-764 - Multiple Locks of a Critical Resource

Assigner

Go Google root

References

141 references

URL	Tags
https://go.dev/cl/763767
https://go.dev/issue/78334
https://groups.google.com/g/golang-announce/c/0uY…
https://pkg.go.dev/vuln/GO-2026-4870
https://access.redhat.com/security/cve/CVE-2026-32283	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2456338	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:24762	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41019	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16101	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24761	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56910	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27076	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:14391	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66401	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28047	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39810	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34365	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20569	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23103	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19715	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16024	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19550	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:18032	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:18027	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17084	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19719	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19750	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20570	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22713	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19714	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20571	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19450	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11881	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11863	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17075	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29195	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23102	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19133	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19139	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19137	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19134	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19136	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22937	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19144	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19135	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22450	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24470	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19156	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19132	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29035	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19126	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33722	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10704	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16875	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11507	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11514	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48790	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:15980	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19634	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51288	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49944	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16102	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25252	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25251	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47719	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47722	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47721	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48036	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25248	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49600	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25250	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34192	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47714	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47716	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47910	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34196	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49509	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34197	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19721	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20607	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20608	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19722	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16021	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20556	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19839	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28038	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19720	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22709	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17287	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24337	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20609	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:14200	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10219	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11711	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11704	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29455	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29703	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19350	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19352	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19351	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23228	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19353	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22714	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26447	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19369	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:28074	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26571	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26636	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22423	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22347	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23345	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:7385	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:7291	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22485	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65126	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42644	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57409	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57801	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57802	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65343	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:14162	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66084	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66523	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65514	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55901	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55898	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55902	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55903	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55900	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21769	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54435	vendor-advisoryx_refsource_REDHAT

Impacted products

266 products

Vendor	Product	Version
Go standard library	crypto/tls	Affected: 0 , < 1.25.9 (semver) Affected: 1.26.0-0 , < 1.26.2 (semver)
Red Hat	Cryostat 4 on RHEL 9	Unaffected: 4.1.1-7 , < * (rpm) cpe:/a:redhat:cryostat:4::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:2.5.10-6.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:1.6.5-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:2.6.14-3.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:1.6.5-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 10	Unaffected: 0:1.6.5-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:2.6.14-3.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:1.6.5-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.25.9-3.el10_1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:10.2.6-25.el10_1 , < * (rpm) Unaffected: 0:10.2.6-26.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.2.3-5.el10_1 , < * (rpm) Unaffected: 0:0.2.7-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:5.3.0-4.el10_1 , < * (rpm) Unaffected: 0:5.3.0-5.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.4.8-5.el10_1 , < * (rpm) Unaffected: 0:0.4.9-4.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.7.1-4.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.144.0-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.0-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.9.27-7.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 1:0.3.8-4.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:165.1-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:52.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.26.1-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 7:5.8.2-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 2:1.22.2-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 2:1.43.1-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.25.9-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 6:0.8.5-2.el10_0.1 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:5.2.2-6.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:10.2.6-24.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.4.7-4.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.9.27-3.el10_0.4 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.2.3-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:3.6.1-2.el10_0.4 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.144.0-2.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:134.1-7.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 2:1.39.9-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 6:5.4.0-15.el10_0.2 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 2:1.18.1-3.el10_0.2 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 1:0.3.2-4.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.25.2-4.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:1.4.0-7.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:0.11-1.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260422204008.a3795dee , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:9.2.10-30.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:5.1.1-14.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 1:0.2.5-7.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.4.1-10.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260520103055.afee755d , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:101.5-1.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 8060020260515174849.ad008a3a , < * (rpm) Unaffected: 8060020260803064027.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_aus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	Unaffected: 8060020260803064027.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_eus_long_life:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	Unaffected: 8060020260515174849.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_tus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	Unaffected: 8060020260515174849.ad008a3a , < * (rpm) cpe:/a:redhat:rhel_e4s:8.6
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 8080020260721142025.63b34585 , < * (rpm) cpe:/a:redhat:rhel_tus:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 8080020260721142025.63b34585 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.25.9-1.el9_7 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.1.1-14.el9_7 , < * (rpm) Unaffected: 0:5.1.1-15.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:10.2.6-21.el9_7 , < * (rpm) Unaffected: 0:10.2.6-22.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.6.1-8.el9_7.1 , < * (rpm) Unaffected: 0:3.7.1-4.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.144.0-2.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:0.2.7-6.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:165.1-2.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:52.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 6:5.8.2-3.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:1.22.2-6.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:1.43.1-2.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:1.9.0-3.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 1:1.26.11-1.el9_0 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.0
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 2:4.4.1-22.el9_2.11 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 2:1.11.4-0.1.el9_2.6 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:1.2.0-3.el9_2.3 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:1.29.7-1.el9_2.5 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:1.25.9-1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:5.1.1-5.el9_2.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:9.0.9-12.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:76.1-6.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:0.2.2-1.el9_2.3 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:0.144.0-2.el9_4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 2:1.33.15-1.el9_4.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 4:4.9.4-20.el9_4.3 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 2:1.14.6-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:1.25.9-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:9.2.10-27.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:5.1.1-8.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:101.3-4.el9_4.3 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 1:0.2.4-8.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:1.25.9-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 5:5.4.0-20.el9_6.3 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:0.144.0-2.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:3.6.1-2.el9_6.4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:5.1.1-14.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:10.2.6-21.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 2:1.39.9-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 1:1.6.2-3.el9_6.1 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 2:1.18.1-5.el9_6.1 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:132.2-7.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 1:0.2.7-1.el9_6.4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 6:0.8.5-2.el9_6.2 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 1:1.4.0-7.rhaos4.15.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenStack Platform 16.2	Unaffected: 0:0.2.1-1.1.el8ost , < * (rpm) cpe:/a:redhat:openstack:16.2::el8
Red Hat	Red Hat OpenStack Platform 16.2	Unaffected: 0:3.3.23-22.el8ost , < * (rpm) cpe:/a:redhat:openstack:16.2::el8
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:3.4.26-9.5.el9ost , < * (rpm) Unaffected: 0:3.4.26-9.6.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:1.2.0-1.4.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:1.9.1-17.1.20260318160829.0e9a6f2.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:0.2.1-6.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:24.3.4.2-7.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:17.1-20260901.1.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 1:18.2.2-17.1.20260702111621.f6b44fc.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 1:16.1.1-17.1.20260713101101.edc6d60.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 1:17.1.1-17.1.20260721220909.c31db88.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:7.1.1-17.1.20260803104219.0211fa9.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 1:19.0.2-17.1.20260630150819.54dd95d.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 1:18.6.1-17.1.20260810120959.85ff760.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 1:23.2.3-17.1.20260810140853.2ace99d.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:0.8.37-17.1.20260107141051.05dd1b2.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:2.27.1-17.1.20260806131309.16dbcae.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:14.3.1-17.1.20260803105013.e7c7ce3.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:14.2.1-17.1.20260803103231.61d7bd7.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:11.0.1-17.1.20260306080955.63fee2c.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:14.2.3-17.1.20260206090839.40278e1.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:1.8.0-17.1.20260114160833.0e94611.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 1:19.4.1-17.1.20260630130603.9b1a13e.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:2.5.1-17.1.20260225150839.5f1cee6.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:4.3.4-17.1.20260324150947.cf69f92.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:12.7.3-17.1.20260701150916.5d6fd1a.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:4.1.1-17.1.20260326121047.bbe5d5a.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:1.9.4-17.1.20260304101059.65d02f0.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	Unaffected: 0:3.3.1-17.1.20260603190918.8debef3.el9ost , < * (rpm) cpe:/a:redhat:openstack:17.1::el9
Red Hat	Red Hat OpenStack Services on OpenShift 18.0	Unaffected: 0:0.1.1-18.0.20260602234716.a95ae05.el9ost , < * (rpm) cpe:/a:redhat:openstack:18.0::el9
Red Hat	Red Hat Satellite 6.16 for RHEL 8	Unaffected: 0:0.0.3-5.el8sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 9	Unaffected: 0:0.0.3-5.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el9
Red Hat	Red Hat Satellite 6.19 for RHEL 9	Unaffected: 0:0.0.3-5.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	RHEM 1.0 for RHEL 9	Unaffected: 0:1.0.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	RHEM 1.1 for RHEL 10	Unaffected: 0:1.1.3-1.el10em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	RHEM 1.1 for RHEL 9	Unaffected: 0:1.1.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Streams for Apache Kafka 3.2.1	Unaffected: danielqsj-kafka_exporter , < * (rpm) cpe:/a:redhat:amq_streams:3.2::el9
Red Hat	Compliance Operator 1	Unaffected: 1781605005 , < * (rpm) cpe:/a:redhat:openshift_compliance_operator:1::el9
Red Hat	Custom Metric Autoscaler 2.19	Unaffected: 1780101239 , < * (rpm) cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9
Red Hat	Multicluster Global Hub 1.3.4	Unaffected: 1779210675 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.3::el9
Red Hat	Multicluster Global Hub 1.4.5	Unaffected: 1779838819 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.4::el9
Red Hat	Multicluster Global Hub 1.6.5	Unaffected: 1780320809 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.6::el9
Red Hat	OpenShift API for Data Protection 1.5	Unaffected: 1788860461 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.5::el9
Red Hat	Red Hat Hardened Images	Unaffected: 1.26.2-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 1.25.9-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Lightspeed (formerly Insights) for Runtimes 1.0	Unaffected: 1.0.3-1779996197 , < * (rpm) cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9
Red Hat	Red Hat Migration Toolkit 1.8	Unaffected: 1783914276 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat multicluster global hub 1.5.3	Unaffected: 1779828691 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.5::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1783544461 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787105216 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1786711400 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788232548 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788301844 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787815645 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787292256 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1786711936 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787652771 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787292260 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787652772 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787329583 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787330073 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787801527 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788315638 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185839 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185798 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185733 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185436 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185842 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185848 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788186007 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185846 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788185899 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787051722 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611780 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786612055 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250508 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251550 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250351 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611759 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251250 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786612219 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787207322 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786614543 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787089049 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1787105202 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1787012376 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1787013251 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift distributed tracing 3.11.0	Unaffected: 1788356473 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.11::el9
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	Unaffected: 1778056267 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.9::el9
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	Unaffected: 1778056233 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.9::el9
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	Unaffected: 1778056245 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.9::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1788561841 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1788594376 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.9	Unaffected: 1788595574 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Web Terminal 1.11	Unaffected: 1786655676 , < * (rpm) cpe:/a:redhat:webterminal:1.11::el9
Red Hat	Red Hat Web Terminal 1.12	Unaffected: 1786654613 , < * (rpm) cpe:/a:redhat:webterminal:1.12::el9
Red Hat	Red Hat Web Terminal 1.13	Unaffected: 1786654596 , < * (rpm) cpe:/a:redhat:webterminal:1.13::el9
Red Hat	Red Hat Web Terminal 1.14	Unaffected: 1786655467 , < * (rpm) cpe:/a:redhat:webterminal:1.14::el9
Red Hat	Red Hat Web Terminal 1.15	Unaffected: 1786654867 , < * (rpm) cpe:/a:redhat:webterminal:1.15::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	Builds for Red Hat OpenShift	cpe:/a:redhat:openshift_builds:1
Red Hat	cert-manager Operator for Red Hat OpenShift	cpe:/a:redhat:cert_manager:1
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	Deployment Validation Operator	cpe:/a:redhat:deployment_validator_operator
Red Hat	ExternalDNS Operator	cpe:/a:redhat:ext_dns_optr:1
Red Hat	External Secrets Operator for Red Hat OpenShift	cpe:/a:redhat:external_secrets_operator:1
Red Hat	Fence Agents Remediation Operator	cpe:/a:redhat:workload_availability_far:0
Red Hat	File Integrity Operator	cpe:/a:redhat:openshift_file_integrity_operator:1
Red Hat	Gatekeeper 3	cpe:/a:redhat:gatekeeper:3
Red Hat	Logging Subsystem for Red Hat OpenShift	cpe:/a:redhat:logging:5 cpe:/a:redhat:logging:6
Red Hat	Logging Subsystem for Red Hat OpenShift	cpe:/a:redhat:logging:5
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4
Red Hat	Machine Deletion Remediation Operator	cpe:/a:redhat:workload_availability_mdr:0
Red Hat	Migration Toolkit for Applications 8	cpe:/a:redhat:migration_toolkit_applications:8
Red Hat	mirror registry for Red Hat OpenShift	cpe:/a:redhat:mirror_registry:1
Red Hat	mirror registry for Red Hat OpenShift 2	cpe:/a:redhat:mirror_registry:2
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	Node HealthCheck Operator	cpe:/a:redhat:workload_availability_nhc:0
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Power monitoring for Red Hat OpenShift	cpe:/a:redhat:openshift_power_monitoring
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat AI Inference Server	cpe:/a:redhat:ai_inference_server:3
Red Hat	Red Hat AMQ Broker 7	cpe:/a:redhat:amq_broker:7
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat build of Apache Camel - HawtIO 4	cpe:/a:redhat:apache_camel_hawtio:4
Red Hat	Red Hat build of Apicurio Registry 2	cpe:/a:redhat:service_registry:2
Red Hat	Red Hat Certification Program for Red Hat Enterprise Linux 9	cpe:/a:redhat:certifications:9
Red Hat	Red Hat Connectivity Link 1	cpe:/a:redhat:connectivity_link:1
Red Hat	Red Hat Developer Hub	cpe:/a:redhat:rhdh:1
Red Hat	Red Hat Edge Manager 1	cpe:/a:redhat:edge_manager:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat JBoss Web Server 6	cpe:/a:redhat:jboss_enterprise_web_server:6
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Cluster Manager CLI	cpe:/a:redhat:openshift_cluster_manager_cli:1
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Openshift Data Foundation 4	cpe:/a:redhat:openshift_data_foundation:4
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift Dev Workspaces Operator	cpe:/a:redhat:devworkspace
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift on AWS	cpe:/a:redhat:openshift_service_on_aws:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Service Interconnect 1	cpe:/a:redhat:service_interconnect:1
Red Hat	Red Hat Service Interconnect 2	cpe:/a:redhat:service_interconnect:2
Red Hat	Red Hat Trusted Artifact Signer	cpe:/a:redhat:trusted_artifact_signer:1
Red Hat	Security Profiles Operator	cpe:/a:redhat:openshift_security_profiles_operator:1
Red Hat	Service Telemetry Framework 1.5	cpe:/a:redhat:stf:1.5
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1
Red Hat	Zero Trust Workload Identity Manager - Tech Preview	cpe:/a:redhat:zero_trust_workload_identity_manager:0

Credits

Jakub Ciolek - https://ciolek.dev/

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-32283",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-13T17:51:46.207289Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-13T18:19:55.848Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4 on RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.1.1-7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.10-6.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.5-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.6.14-3.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.5-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.5-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.6.14-3.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.5-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.9-3.el10_1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1",
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-25.el10_1",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-26.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1",
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.3-5.el10_1",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.7-3.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1",
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.3.0-4.el10_1",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.3.0-5.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1",
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.8-5.el10_1",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.9-4.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-4.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-server",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-client",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.0-3.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openprinting-ipp-usb",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.9.27-7.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.8-4.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.1-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "7:5.8.2-3.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.22.2-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.43.1-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.9-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "6:0.8.5-2.el10_0.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.2.2-6.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-24.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.7-4.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openprinting-ipp-usb",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.9.27-3.el10_0.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.3-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.6.1-2.el10_0.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:134.1-7.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.39.9-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "6:5.4.0-15.el10_0.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.18.1-3.el10_0.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.2-4.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.2-4.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "host-metering",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.4.0-7.el7_9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-script",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.11-1.el7_9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "go-toolset:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260422204008.a3795dee",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:9.2.10-30.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-14.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.5-7.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.4.1-10.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260520103055.afee755d",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.5-1.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260515174849.ad008a3a",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260803064027.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus_long_life:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260803064027.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260515174849.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8060020260515174849.ad008a3a",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260721142025.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8080020260721142025.63b34585",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.9-1.el9_7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-14.el9_7",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-15.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-21.el9_7",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-22.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.6.1-8.el9_7.1",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-4.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-6.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-2.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "6:5.8.2-3.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.22.2-6.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.43.1-2.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:1.9.0-3.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.0"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:1.26.11-1.el9_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:4.4.1-22.el9_2.11",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.11.4-0.1.el9_2.6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:1.2.0-3.el9_2.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:1.29.7-1.el9_2.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.9-1.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-5.el9_2.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:9.0.9-12.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:76.1-6.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.2-1.el9_2.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.33.15-1.el9_4.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4:4.9.4-20.el9_4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.14.6-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.9-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:9.2.10-27.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-8.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.3-4.el9_4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.4-8.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.9-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "5:5.4.0-20.el9_6.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.144.0-2.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.6.1-2.el9_6.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-14.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-21.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.39.9-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:1.6.2-3.el9_6.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.18.1-5.el9_6.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:132.2-7.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-1.el9_6.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "6:0.8.5-2.el9_6.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:1.4.0-7.rhaos4.15.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "collectd-sensubility",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.1-1.1.el8ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.3.23-22.el8ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.4.26-9.5.el9ost",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.4.26-9.6.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-collection-ansible-posix",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.2.0-1.4.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-collections-openstack",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.9.1-17.1.20260318160829.0e9a6f2.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "collectd-sensubility",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.1-6.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "erlang",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:24.3.4.2-7.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "octavia-amphora-image-fips-x86_64",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:17.1-20260901.1.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "octavia-amphora-image-x86_64",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:17.1-20260901.1.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openstack-cinder",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:18.2.2-17.1.20260702111621.f6b44fc.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openstack-heat",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:16.1.1-17.1.20260713101101.edc6d60.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openstack-ironic",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:17.1.1-17.1.20260721220909.c31db88.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openstack-ironic-python-agent",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:7.1.1-17.1.20260803104219.0211fa9.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openstack-keystone",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:19.0.2-17.1.20260630150819.54dd95d.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openstack-neutron",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:18.6.1-17.1.20260810120959.85ff760.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openstack-nova",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:23.2.3-17.1.20260810140853.2ace99d.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openstack-selinux",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.8.37-17.1.20260107141051.05dd1b2.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openstack-swift",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.27.1-17.1.20260806131309.16dbcae.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openstack-tripleo-heat-templates",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:14.3.1-17.1.20260803105013.e7c7ce3.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "os-net-config",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:14.2.1-17.1.20260803103231.61d7bd7.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "puppet-rabbitmq",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:11.0.1-17.1.20260306080955.63fee2c.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "puppet-tripleo",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:14.2.3-17.1.20260206090839.40278e1.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python-cinder-tests-tempest",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.8.0-17.1.20260114160833.0e94611.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python-django-horizon",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:19.4.1-17.1.20260630130603.9b1a13e.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python-glance-store",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.1-17.1.20260225150839.5f1cee6.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python-os-brick",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.3.4-17.1.20260324150947.cf69f92.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python-oslo-messaging",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:12.7.3-17.1.20260701150916.5d6fd1a.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python-oslo-serialization",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.1.1-17.1.20260326121047.bbe5d5a.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python-ovsdbapp",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.9.4-17.1.20260304101059.65d02f0.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-director-images",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:17.1-20260901.1.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-director-images-fips-x86_64",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:17.1-20260901.1.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-director-images-ipa-fips-x86_64",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:17.1-20260901.1.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-director-images-ipa-x86_64",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:17.1-20260901.1.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-director-images-minimal",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:17.1-20260901.1.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-director-images-minimal-fips",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:17.1-20260901.1.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-director-images-multirhel-x86_64",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:17.1-20260901.1.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-director-images-uefi-fips-x86_64",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:17.1-20260901.1.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-director-images-uefi-x86_64",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:17.1-20260901.1.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-director-images-x86_64",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:17.1-20260901.1.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "tripleo-ansible",
            "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.3.1-17.1.20260603190918.8debef3.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openstack-k8s-operators-os-diff",
            "product": "Red Hat OpenStack Services on OpenShift 18.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.1.1-18.0.20260602234716.a95ae05.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.3-5.el8sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.3-5.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.19 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.3-5.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.0 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el10em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github",
            "product": "Streams for Apache Kafka 3.2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "danielqsj-kafka_exporter",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_compliance_operator:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "Compliance Operator 1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781605005",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
            "product": "Custom Metric Autoscaler 2.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780101239",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779210675",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.4.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779838819",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780320809",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788860461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-26-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.26.2-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-25-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.25.9-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
            "product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.0.3-1779996197",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-registry-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783914276",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Red Hat multicluster global hub 1.5.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779828691",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kueue-controller-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783544461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-router-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787105216",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-controller-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786711400",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-registry-job-async-upload-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788232548",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788301844",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787815645",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787292256",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786711936",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787652771",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787292260",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787652772",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ta-lmes-driver-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787329583",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-service-operator-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787330073",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787801527",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788315638",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185839",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185798",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185733",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185436",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185842",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185848",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788186007",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788185899",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-feast-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787051722",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611780",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612055",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-automl-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251550",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250351",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611759",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251250",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612219",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-serving-api-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787207322",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ta-lmes-driver-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786614543",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trainer-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787089049",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787105202",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/frr-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787012376",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787013251",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.11.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788356473",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-collector-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.9.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778056267",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3.9.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778056233",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-target-allocator-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.9.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778056245",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788561841",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788594376",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788595574",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786655676",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786654613",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786654596",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786655467",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786654867",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/assisted-installer-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Builds for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "cert-manager Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "build-of-trustee/trustee-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:deployment_validator_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "dvo/deployment-validation-rhel8-operator",
            "product": "Deployment Validation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel8",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "edo/external-dns-rhel9",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/fence-agents-remediation-rhel8-operator",
            "product": "Fence Agents Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_file_integrity_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "File Integrity Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "affected",
            "packageName": "gatekeeper/gatekeeper-rhel9-operator",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5",
              "cpe:/a:redhat:logging:6"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/logging-loki-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "affected",
            "packageName": "lvms4/lvms-rhel9-operator",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel8",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel9",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/machine-deletion-remediation-rhel8-operator",
            "product": "Machine Deletion Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Migration Toolkit for Applications 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:mirror_registry:1"
            ],
            "defaultStatus": "unknown",
            "packageName": "openshift/mirror-registry-rhel8",
            "product": "mirror registry for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:mirror_registry:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift/mirror-registry-rhel8",
            "product": "mirror registry for Red Hat OpenShift 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-cli-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "helm",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "ocp-tools-4/jenkins-agent-base-rhel9",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "ocp-tools-4/jenkins-rhel8",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "ocp-tools-4/jenkins-rhel9",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-jenkins",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines-client",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "kn-workflow-plugin",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-clients",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-golang-builder-container",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-golang-builder-container",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_power_monitoring"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-power-monitoring/kepler-rhel9",
            "product": "Power monitoring for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/3scale-rhel7-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/3scale-rhel9-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp26/3scale-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp26/operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/subctl-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-cpu-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-neuron-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-tpu-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaii/vllm-neuron-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7"
            ],
            "defaultStatus": "affected",
            "packageName": "amq7/amq-broker-rhel9-operator",
            "product": "Red Hat AMQ Broker 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-danielqsj-kafka_exporter",
            "product": "Red Hat AMQ Broker 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform/platform-operator-bundle",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl30",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl32",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3x-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apache_camel_hawtio:4"
            ],
            "defaultStatus": "affected",
            "packageName": "rhbac-4/hawtio-rhel9-operator",
            "product": "Red Hat build of Apache Camel - HawtIO 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_registry:2"
            ],
            "defaultStatus": "affected",
            "packageName": "apicurio/apicurio-registry-rhel8-operator",
            "product": "Red Hat build of Apicurio Registry 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_registry:2"
            ],
            "defaultStatus": "affected",
            "packageName": "apicurio/apicurio-registry-rhel9-operator",
            "product": "Red Hat build of Apicurio Registry 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:certifications:9"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-certification-preflight",
            "product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/coredns-rhel9",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-rhel9-operator",
            "product": "Red Hat Developer Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "runc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-aws-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gaudi-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_web_server:6"
            ],
            "defaultStatus": "affected",
            "packageName": "jboss-webserver/jws-rhel9-operator",
            "product": "Red Hat JBoss Web Server 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/base-image-neuron-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-codeflare-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-dashboard-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kf-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-agent-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kube-auth-proxy-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llama-stack-core-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-maas-api-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-maas-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlflow-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-runtime-generic-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mm-rest-proxy-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-must-gather-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-rhel9-operator",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-spark-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ta-lmes-job-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-th06-cpu-torch210-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-th06-cpu-torch291-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-th06-cuda130-torch210-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-th06-cuda130-torch291-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-th06-rocm64-torch291-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-training-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/rhai-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_cluster_manager_cli:1"
            ],
            "defaultStatus": "affected",
            "packageName": "ocm-cli-clients/ocm-cli-rhel9",
            "product": "Red Hat OpenShift Cluster Manager CLI",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon-rs",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-prometheus-promu",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ignition",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kata-containers",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-sdn-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-sdn-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-golang-builder-container",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-kuryr",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "podman",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "runc",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/udi-rhel9",
            "product": "Red Hat OpenShift Dev Spaces",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:devworkspace"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-rhel9-operator",
            "product": "Red Hat OpenShift Dev Workspaces Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_service_on_aws:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rosa",
            "product": "Red Hat OpenShift on AWS",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-api",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "container-native-virtualization/virt-api-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kubevirt",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-golang-builder-container",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-rhel8/osp-director-agent",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "collectd-libpod-stats",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-rhel9/osp-director-agent",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoso-operators/sg-core-rhel9",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite:el8/yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/ec-rhel9",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-selinuxd-rhel8",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:stf:1.5"
            ],
            "defaultStatus": "unaffected",
            "packageName": "stf/sg-core-rhel9",
            "product": "Service Telemetry Framework 1.5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-04-08T01:06:57.670Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS)."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-764",
                "description": "Multiple Locks of a Critical Resource",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:09:10.095Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-32283"
          },
          {
            "name": "RHBZ#2456338",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32283.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24762"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41019"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16101"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24761"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54757"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56910"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27076"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:14391"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66401"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28047"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39810"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34365"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20569"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23103"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19715"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16024"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19550"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:18032"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:18027"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17084"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19719"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19750"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20570"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22713"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19714"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20571"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19450"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10217"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11881"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11863"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17075"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29195"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23102"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19133"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19139"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19137"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19134"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19136"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22937"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19144"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19135"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22450"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24470"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19156"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19132"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29035"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19126"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33722"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10704"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16875"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11507"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11514"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48790"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:15980"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19634"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51288"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49944"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16102"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25252"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25251"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47719"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47722"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47721"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48036"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25248"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49600"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25250"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34192"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47714"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47716"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47910"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34196"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49509"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34197"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19721"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20607"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20608"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19722"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16021"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20556"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19839"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28038"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19720"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22709"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17287"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24337"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20609"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:14200"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10219"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11711"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:11704"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29455"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29703"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19350"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19352"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19351"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23228"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19353"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22714"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26447"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19369"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:28074"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26571"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26636"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22423"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22347"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23345"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:7385"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:7291"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22485"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65126"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42644"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57409"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57801"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57802"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65343"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:14162"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66084"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66523"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65514"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55901"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55898"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55902"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55903"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55900"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21769"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54435"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16101: Red Hat Enterprise Linux Server (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56910: Red Hat OpenShift Container Platform 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27076: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:14391: Cryostat 4 on RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66401: Red Hat OpenStack Platform 17.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28047: Red Hat OpenStack Platform 17.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34365: Red Hat Satellite 6.19 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20569: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23103: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19715: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16024: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19550: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:18032: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:18027: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17084: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19750: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20570: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22713: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19714: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20571: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19450: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10217: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11712: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11881: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11863: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17075: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29195: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23102: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19133: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19139: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19137: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19134: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19136: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22937: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19144: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22450: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19156: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19132: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29035: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19126: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33722: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10704: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16875: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11507: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11514: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48790: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:15980: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19634: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51288: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49944: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16102: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25252: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25251: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47719: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47722: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47721: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48036: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25248: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49600: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25250: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34192: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47712: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47714: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47716: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47910: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34196: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49509: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34197: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20607: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20608: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19722: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16021: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20556: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19839: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28038: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22709: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17287: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24337: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20609: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:14200: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10219: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11711: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:11704: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29455: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29703: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19350: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19352: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19351: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23228: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22714: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26447: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19369: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:28074: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26571: Compliance Operator 1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26636: Custom Metric Autoscaler 2.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22423: Multicluster Global Hub 1.3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22347: Multicluster Global Hub 1.4.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23345: Multicluster Global Hub 1.6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66022: OpenShift API for Data Protection 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:7385: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:7291: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22485: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57409: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57801: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57802: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65343: Red Hat OpenShift distributed tracing 3.11.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:14162: Red Hat OpenShift distributed tracing 3.9.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66084: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66523: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65514: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55901: Red Hat Web Terminal 1.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55898: Red Hat Web Terminal 1.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55902: Red Hat Web Terminal 1.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55903: Red Hat Web Terminal 1.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55900: Red Hat Web Terminal 1.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21769: Red Hat multicluster global hub 1.5.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-04-08T02:01:16.213Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-04-08T01:06:57.670Z",
            "value": "Made public."
          }
        ],
        "title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/tls",
          "product": "crypto/tls",
          "programRoutines": [
            {
              "name": "Conn.handleKeyUpdate"
            },
            {
              "name": "clientHandshakeStateTLS13.establishHandshakeKeys"
            },
            {
              "name": "clientHandshakeStateTLS13.readServerFinished"
            },
            {
              "name": "serverHandshakeStateTLS13.sendServerParameters"
            },
            {
              "name": "serverHandshakeStateTLS13.readClientFinished"
            },
            {
              "name": "Conn.Handshake"
            },
            {
              "name": "Conn.HandshakeContext"
            },
            {
              "name": "Conn.Read"
            },
            {
              "name": "Conn.Write"
            },
            {
              "name": "Dial"
            },
            {
              "name": "DialWithDialer"
            },
            {
              "name": "Dialer.Dial"
            },
            {
              "name": "Dialer.DialContext"
            },
            {
              "name": "QUICConn.HandleData"
            },
            {
              "name": "QUICConn.Start"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.2",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek - https://ciolek.dev/"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-667: Improper Locking",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T01:06:57.670Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/763767"
        },
        {
          "url": "https://go.dev/issue/78334"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4870"
        }
      ],
      "title": "Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-32283",
    "datePublished": "2026-04-08T01:06:57.670Z",
    "dateReserved": "2026-03-11T16:38:46.556Z",
    "dateUpdated": "2026-09-11T12:09:10.095Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33811 (GCVE-0-2026-33811)

Vulnerability from cvelistv5 – Published: 2026-05-07 19:41 – Updated: 2026-09-11 12:09

Title

Crash when handling long CNAME response in net

Summary

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-08 14:25 UTC

CWE

CWE-415 - Double Free
CWE-1341 - Multiple Releases of Same Resource or Handle

Assigner

Go Google root

References

129 references

URL	Tags
https://go.dev/issue/78803
https://go.dev/cl/767860
https://groups.google.com/g/golang-announce/c/qcC…
https://pkg.go.dev/vuln/GO-2026-4981
https://access.redhat.com/security/cve/CVE-2026-33811	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2467822	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:42079	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41019	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42078	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56785	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56910	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56852	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60018	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57482	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54552	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42082	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50336	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39810	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42150	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42240	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49703	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49702	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53413	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61313	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54168	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51187	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39272	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22120	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65534	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35832	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34357	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42946	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39573	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:38504	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22112	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39266	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36776	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61253	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57649	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53415	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22121	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65886	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36617	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34359	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54500	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34364	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56340	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47952	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50843	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41030	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44622	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47149	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53530	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51033	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59467	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43692	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51057	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36625	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36207	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42132	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33574	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40945	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40118	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23264	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54441	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43038	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65126	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42644	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36648	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56790	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56789	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56913	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56912	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60025	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57488	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54556	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54584	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54603	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54602	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35994	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35993	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35995	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33120	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33123	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33142	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33150	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54287	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54284	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54286	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54285	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54274	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54283	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50205	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60302	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51341	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36797	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42047	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42050	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42051	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42049	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42048	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42852	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54435	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46885	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41055	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47735	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59559	vendor-advisoryx_refsource_REDHAT

Impacted products

260 products

Vendor	Product	Version
Go standard library	net	Affected: 0 , < 1.25.10 (semver) Affected: 1.26.0-0 , < 1.26.3 (semver)
Red Hat	Cryostat 4 on RHEL 9	Unaffected: 4.2.0-19 , < * (rpm) cpe:/a:redhat:cryostat:4::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:1.6.6-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:2.5.10-7.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:2.6.17-2.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:2.6.17-2.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.26.3-4.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.152.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.9.27-7.el10_2.2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.7.1-5.el10_2.6 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.4.9.2-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.2.10-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:52.1-1.el10_2.2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.26.5-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.26.1-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.4.7-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.152.1-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.2.3-6.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 1:0.3.2-6.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:0.11-1.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260518131104.a3795dee , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 1:0.2.5-8.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260709093628.afee755d , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.4.1-12.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.26.3-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.152.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.2.11-2.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.7.1-4.el9_8.2 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:52.1-1.el9_8.2 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:0.152.1-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:1.26.5-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:0.152.1-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 0:0.19.0-5.rhaos4.14.el8 , < * (rpm) cpe:/a:redhat:openshift:4.14::el8
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 0:1.27.0-8.el8 , < * (rpm) cpe:/a:redhat:openshift:4.14::el8
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 0:4.14.0-202608131802.p2.g44b3ac2.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.14::el8
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 0:4.14.0-202608131802.p2.g9a7820e.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.14::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 0:0.20.0-6.rhaos4.15.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 0:1.28.0-9.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 0:4.15.0-202608131733.p2.g5cb2ef4.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 0:4.15.0-202608131733.p2.g8231637.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 0:4.15.0-202608131733.p2.gfd77d92.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 0:4.15.0-202608131733.p2.g5638728.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 0:4.15.0-202608131733.p2.gfc50272.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.15::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:0.21.0-6.rhaos4.16.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:1.29.0-8.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.0-202608111505.p2.g41c4e9b.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.0-202608111505.p2.g6f88b58.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.0-202608111505.p2.ga53e9de.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.0-202608111505.p2.ga3ebdc0.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.0-202608111505.p2.g26b43df.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 0:1.30.0-9.el8 , < * (rpm) cpe:/a:redhat:openshift:4.17::el8
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 0:4.17.0-202608132055.p2.g4e295fa.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.17::el8
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 0:4.17.0-202608201812.p2.g7189593.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.17::el8
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 0:4.17.0-202608122146.p2.g144bace.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.17::el8
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 0:4.17.0-202608122146.p2.g5bcfbfd.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.17::el8
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 0:4.17.0-202608122146.p2.g8ce997d.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.17::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:0.23.0-5.rhaos4.18.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:1.31.1-7.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:4.18.0-202608132034.p2.g91c2408.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:4.18.0-202608132034.p2.g6febe61.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:4.18.0-202608121933.p2.gc395190.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:4.18.0-202608121933.p2.g9795abd.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:4.18.0-202608121933.p2.g6ea2356.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 0:1.32.0-6.el9 , < * (rpm) cpe:/a:redhat:openshift:4.19::el8
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.19::el8
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.19::el8
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.19::el8
Red Hat	Red Hat OpenStack Platform 16.2	Unaffected: 0:0.2.1-1.1.el8ost , < * (rpm) cpe:/a:redhat:openstack:16.2::el8
Red Hat	Red Hat OpenStack Platform 16.2	Unaffected: 0:3.3.23-22.el8ost , < * (rpm) cpe:/a:redhat:openstack:16.2::el8
Red Hat	Red Hat OpenStack Services on OpenShift 18.0	Unaffected: 0:0.1.1-18.0.20260602234716.a95ae05.el9ost , < * (rpm) cpe:/a:redhat:openstack:18.0::el9
Red Hat	Red Hat Satellite 6.16 for RHEL 8	Unaffected: 0:0.0.4-1.el8sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el9
Red Hat	Red Hat Satellite 6.17 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.17::el9
Red Hat	Red Hat Satellite 6.18 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	RHEM 1.0 for RHEL 9	Unaffected: 0:1.0.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	RHEM 1.1 for RHEL 10	Unaffected: 0:1.1.3-1.el10em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	RHEM 1.1 for RHEL 9	Unaffected: 0:1.1.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Streams for Apache Kafka 3.2.1	Unaffected: danielqsj-kafka_exporter , < * (rpm) cpe:/a:redhat:amq_streams:3.2::el9
Red Hat	Compliance Operator 1	Unaffected: 1786380082 , < * (rpm) cpe:/a:redhat:openshift_compliance_operator:1::el9
Red Hat	Logging for Red Hat OpenShift 6	Unaffected: 1785418851 , < * (rpm) cpe:/a:redhat:logging:6.0::el9
Red Hat	Logging for Red Hat OpenShift 6.2	Unaffected: 1784747813 , < * (rpm) cpe:/a:redhat:logging:6.2::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.4	Unaffected: 1782408807 , < * (rpm) cpe:/a:redhat:logging:6.4::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.5	Unaffected: 1786645248 , < * (rpm) cpe:/a:redhat:logging:6.5::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1784915379 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911941 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911952 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911945 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911975 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786912006 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911973 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911950 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911984 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786907276 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783985999 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784306906 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1786658519 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Multicluster Global Hub 1.4.5	Unaffected: 1784061472 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.4::el9
Red Hat	Multicluster Global Hub 1.6.5	Unaffected: 1784152046 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.6::el9
Red Hat	Multicluster Global Hub 1.7.0	Unaffected: 1784768332 , < * (rpm) Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9
Red Hat	OpenShift API for Data Protection 1.3	Unaffected: 1785180878 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.3::el9
Red Hat	OpenShift API for Data Protection 1.4	Unaffected: 1786944540 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.4::el9
Red Hat	OpenShift API for Data Protection 1.5	Unaffected: 1788860461 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.5::el9
Red Hat	OpenShift API for Data Protection 1.6	Unaffected: 1784058822 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.6::el9
Red Hat	OpenShift Developer Tools and Services 1.6.3	Unaffected: 1784727697 , < * (rpm) cpe:/a:redhat:source_to_image:1.6::el8
Red Hat	OpenShift Developer Tools and Services 1.6.3	Unaffected: 1784728036 , < * (rpm) cpe:/a:redhat:source_to_image:1.6::el8
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1786908301 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1783357116 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1783357140 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.11	Unaffected: 1783352589 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.11::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1783962464 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1782767215 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502438 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194574 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784127736 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Hardened Images	Unaffected: 1.25.11-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 1.26.4-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Lightspeed (formerly Insights) for Runtimes 1.0	Unaffected: 1786483782 , < * (rpm) cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9
Red Hat	Red Hat Migration Toolkit 1.8	Unaffected: 1783914276 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat Migration Toolkit for Applications 8.1	Unaffected: 1785171639 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.1::el9
Red Hat	Red Hat Migration Toolkit for Applications 8.2	Unaffected: 1784211378 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.2::el9
Red Hat	Red Hat multicluster global hub 1.5.3	Unaffected: 1784127491 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.5::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1783544461 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1783946386 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788181065 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788181054 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788182334 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787588259 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788312157 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788331391 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787330073 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787002529 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787001948 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787002057 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787051722 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611780 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786612055 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250508 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251550 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611759 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251250 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786612219 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250617 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787361412 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787089049 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787361677 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787562200 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057868 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 1787002807 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 1787001863 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 1787055135 , < * (rpm) cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 1787028097 , < * (rpm) cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1786788331 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1787554347 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1786754425 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1786490745 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1786525840 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1786573075 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1786526139 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1785704547 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift GitOps 1.19	Unaffected: 1782292352 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.19::el8
Red Hat	Red Hat OpenShift GitOps 1.20	Unaffected: 1782383826 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.20::el9
Red Hat	Red Hat OpenShift GitOps 1.21	Unaffected: 1782910941 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.21::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782222217 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782223341 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782296193 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782222607 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782222163 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782223138 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782222394 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782222451 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782226178 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782224487 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782303211 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782224541 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782223045 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782222366 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782310747 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782222038 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Workload Availability 0.12	Unaffected: 1785202723 , < * (rpm) cpe:/a:redhat:workload_availability_nhc:0.12::el9
Red Hat	Red Hat OpenShift Workload Availability 0.13	Unaffected: 1785203036 , < * (rpm) cpe:/a:redhat:workload_availability_snr:0.13::el9
Red Hat	Red Hat OpenShift Workload Availability 0.3	Unaffected: 1785203474 , < * (rpm) cpe:/a:redhat:workload_availability_sbr:0.3::el9
Red Hat	Red Hat OpenShift Workload Availability 0.7	Unaffected: 1785203508 , < * (rpm) cpe:/a:redhat:workload_availability_mdr:0.7::el9
Red Hat	Red Hat OpenShift Workload Availability 0.8	Unaffected: 1785203079 , < * (rpm) cpe:/a:redhat:workload_availability_far:0.8::el9
Red Hat	Red Hat OpenShift Workload Availability 5.7	Unaffected: 1785202847 , < * (rpm) cpe:/a:redhat:workload_availability_nmo:5.7::el9
Red Hat	Red Hat OpenStack Services on OpenShift 18.0	Unaffected: 1786612662 , < * (rpm) cpe:/a:redhat:openstack:18.0::el9
Red Hat	Red Hat Satellite 6.18	Unaffected: 1785923308 , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1785929994 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 4-1.4.2 , < * (rpm) Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Web Terminal 1.11	Unaffected: 1784296203 , < * (rpm) cpe:/a:redhat:webterminal:1.11::el9
Red Hat	Red Hat Web Terminal 1.12	Unaffected: 1784247610 , < * (rpm) cpe:/a:redhat:webterminal:1.12::el9
Red Hat	Red Hat Web Terminal 1.13	Unaffected: 1784296127 , < * (rpm) cpe:/a:redhat:webterminal:1.13::el9
Red Hat	Red Hat Web Terminal 1.14	Unaffected: 1784296114 , < * (rpm) cpe:/a:redhat:webterminal:1.14::el9
Red Hat	Red Hat Web Terminal 1.15	Unaffected: 1784296033 , < * (rpm) cpe:/a:redhat:webterminal:1.15::el9
Red Hat	Red Hat Web Terminal 1.16	Unaffected: 1784295767 , < * (rpm) cpe:/a:redhat:webterminal:1.16::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	cert-manager Operator for Red Hat OpenShift	cpe:/a:redhat:cert_manager:1
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
Red Hat	Deployment Validation Operator	cpe:/a:redhat:deployment_validator_operator
Red Hat	ExternalDNS Operator	cpe:/a:redhat:ext_dns_optr:1
Red Hat	External Secrets Operator for Red Hat OpenShift	cpe:/a:redhat:external_secrets_operator:1
Red Hat	Fence Agents Remediation Operator	cpe:/a:redhat:workload_availability_far:0
Red Hat	File Integrity Operator	cpe:/a:redhat:openshift_file_integrity_operator:1
Red Hat	Gatekeeper 3	cpe:/a:redhat:gatekeeper:3
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4
Red Hat	Machine Deletion Remediation Operator	cpe:/a:redhat:workload_availability_mdr:0
Red Hat	mirror registry for Red Hat OpenShift	cpe:/a:redhat:mirror_registry:1
Red Hat	mirror registry for Red Hat OpenShift 2	cpe:/a:redhat:mirror_registry:2
Red Hat	Multiarch Tuning Operator	cpe:/a:redhat:multiarch_tuning_operator
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Multicluster Global Hub	cpe:/a:redhat:multicluster_globalhub
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	Node HealthCheck Operator	cpe:/a:redhat:workload_availability_nhc:0
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Power monitoring for Red Hat OpenShift	cpe:/a:redhat:openshift_power_monitoring
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat AMQ Clients	cpe:/a:redhat:amq_clients:2023
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat build of Apicurio Registry 2	cpe:/a:redhat:service_registry:2
Red Hat	Red Hat Ceph Storage 5	cpe:/a:redhat:ceph_storage:5
Red Hat	Red Hat Ceph Storage 6	cpe:/a:redhat:ceph_storage:6
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Certification Program for Red Hat Enterprise Linux 9	cpe:/a:redhat:certifications:9
Red Hat	Red Hat Connectivity Link 1	cpe:/a:redhat:connectivity_link:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Cluster Manager CLI	cpe:/a:redhat:openshift_cluster_manager_cli:1
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Openshift Data Foundation 4	cpe:/a:redhat:openshift_data_foundation:4
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift Dev Workspaces Operator	cpe:/a:redhat:devworkspace
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift on AWS	cpe:/a:redhat:openshift_service_on_aws:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Service Interconnect 1	cpe:/a:redhat:service_interconnect:1
Red Hat	Red Hat Service Interconnect 2	cpe:/a:redhat:service_interconnect:2
Red Hat	Security Profiles Operator	cpe:/a:redhat:openshift_security_profiles_operator:1
Red Hat	Service Telemetry Framework 1.5	cpe:/a:redhat:stf:1.5
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1
Red Hat	Zero Trust Workload Identity Manager - Tech Preview	cpe:/a:redhat:zero_trust_workload_identity_manager:0

Credits

hamayanhamayan

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-33811",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T14:25:39.702568Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T14:25:43.896Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4 on RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.2.0-19",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.10-7.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.6.17-2.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.6.17-2.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.3-4.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openprinting-ipp-usb",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.9.27-7.el10_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-5.el10_2.6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.9.2-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.10-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el10_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.1-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.7-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.3-6.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.2-6.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-script",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.11-1.el7_9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "go-toolset:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260518131104.a3795dee",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.5-8.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "container-tools:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260709093628.afee755d",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.4.1-12.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.3-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "oci-seccomp-bpf-hook",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.2.11-2.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-4.el9_8.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el9_8.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.19.0-5.rhaos4.14.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.27.0-8.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.14.0-202608131802.p2.g44b3ac2.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.14.0-202608131802.p2.g9a7820e.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.20.0-6.rhaos4.15.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.28.0-9.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.15.0-202608131733.p2.g5cb2ef4.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.15.0-202608131733.p2.g8231637.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.15.0-202608131733.p2.gfd77d92.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.15.0-202608131733.p2.g5638728.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.15.0-202608131733.p2.gfc50272.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.21.0-6.rhaos4.16.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.29.0-8.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.0-202608111505.p2.g41c4e9b.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.0-202608111505.p2.g6f88b58.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.0-202608111505.p2.ga53e9de.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.0-202608111505.p2.ga3ebdc0.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.0-202608111505.p2.g26b43df.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.30.0-9.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.17.0-202608132055.p2.g4e295fa.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.17.0-202608201812.p2.g7189593.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.17.0-202608122146.p2.g144bace.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.17.0-202608122146.p2.g5bcfbfd.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.17.0-202608122146.p2.g8ce997d.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.23.0-5.rhaos4.18.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.31.1-7.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-202608132034.p2.g91c2408.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-202608132034.p2.g6febe61.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-202608121933.p2.gc395190.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-202608121933.p2.g9795abd.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-202608121933.p2.g6ea2356.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.32.0-6.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "collectd-sensubility",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.1-1.1.el8ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.3.23-22.el8ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openstack-k8s-operators-os-diff",
            "product": "Red Hat OpenStack Services on OpenShift 18.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.1.1-18.0.20260602234716.a95ae05.el9ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el8sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.17 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.18 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.19 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.0 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el10em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github",
            "product": "Streams for Apache Kafka 3.2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "danielqsj-kafka_exporter",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_compliance_operator:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "Compliance Operator 1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786380082",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging for Red Hat OpenShift 6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785418851",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging for Red Hat OpenShift 6.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784747813",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift 6.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782408807",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/logging-loki-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift 6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786645248",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784915379",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/addon-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911941",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/backplane-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911952",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911945",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911975",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786912006",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911973",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/multicloud-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911950",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/placement-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911984",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-operator-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911984",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/work-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786907276",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783985999",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784306906",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786658519",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.4.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784061472",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784152046",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.7.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784768332",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785775948",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785180878",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786944540",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788860461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784058822",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:source_to_image:1.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "source-to-image/source-to-image-rhel8",
            "product": "OpenShift Developer Tools and Services 1.6.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784727697",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:source_to_image:1.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "source-to-image/source-to-image-rhel9",
            "product": "OpenShift Developer Tools and Services 1.6.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784728036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786908301",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783357116",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783357140",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel9",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783352589",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783962464",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-rhel9-operator",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782767215",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502438",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194574",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127736",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-25-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.25.11-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-26-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.26.4-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
            "product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786483782",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-registry-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783914276",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785171639",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784211378",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Red Hat multicluster global hub 1.5.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127491",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kueue-controller-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783544461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-operator-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783946386",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788181065",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788181054",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788182334",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mm-rest-proxy-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787588259",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788312157",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhel9-operator",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788331391",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-service-operator-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787330073",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787002529",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787001948",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787002057",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-feast-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787051722",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611780",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612055",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-automl-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251550",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611759",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251250",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612219",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250617",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787361412",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trainer-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787089049",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787361677",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787562200",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057868",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sdn-rhel8",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787002807",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-operator",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787001863",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sdn-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787055135",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-operator",
            "product": "Red Hat OpenShift Container Platform 4.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787028097",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786788331",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787554347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786754425",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786490745",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786525840",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786573075",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786526139",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785704547",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel8",
            "product": "Red Hat OpenShift GitOps 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782292352",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel9",
            "product": "Red Hat OpenShift GitOps 1.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383826",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel9",
            "product": "Red Hat OpenShift GitOps 1.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782910941",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222217",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782223341",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782296193",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222607",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222163",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782223138",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222394",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222451",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782226178",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782224487",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782303211",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782224541",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782223045",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222366",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782310747",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222038",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785202723",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_snr:0.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/self-node-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_sbr:0.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/storage-based-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203474",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/machine-deletion-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/fence-agents-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203079",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nmo:5.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-maintenance-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 5.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785202847",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoso-operators/sg-core-rhel9",
            "product": "Red Hat OpenStack Services on OpenShift 18.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612662",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785923308",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785929994",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "conforma-cli-stack-v1",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.2",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296203",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784247610",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296127",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296033",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784295767",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/assisted-installer-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "cert-manager Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "build-of-trustee/trustee-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "confidential-compute-attestation-tech-preview/trustee-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
            "product": "Custom Metric Autoscaler operator for Red Hat Openshift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:deployment_validator_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "dvo/deployment-validation-rhel8-operator",
            "product": "Deployment Validation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9-operator",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/far-operator-0-8",
            "product": "Fence Agents Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_file_integrity_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "File Integrity Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "affected",
            "packageName": "gatekeeper/gatekeeper-rhel9-operator",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-rhel9-operator",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "affected",
            "packageName": "lvms4/topolvm-rhel8",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel9",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/mdr-operator-0-7",
            "product": "Machine Deletion Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:mirror_registry:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift/mirror-registry-rhel8",
            "product": "mirror registry for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:mirror_registry:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift/mirror-registry-rhel8",
            "product": "mirror registry for Red Hat OpenShift 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multiarch_tuning_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
            "product": "Multiarch Tuning Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/maestro-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel8",
            "product": "Multicluster Global Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-cli-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/nhc-operator-0-12",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "helm",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines-client",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "kn-workflow-plugin",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-clients",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-golang-builder-container",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_power_monitoring"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-power-monitoring/kepler-rhel9",
            "product": "Power monitoring for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/3scale-rhel7-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/3scale-rhel9-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/config-policy-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/governance-policy-propagator-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/subctl-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_clients:2023"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python39-qpid-proton",
            "product": "Red Hat AMQ Clients",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_clients:2023"
            ],
            "defaultStatus": "unaffected",
            "packageName": "qpid-proton",
            "product": "Red Hat AMQ Clients",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform/platform-operator-bundle",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl30",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl32",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3x-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_registry:2"
            ],
            "defaultStatus": "affected",
            "packageName": "apicurio/apicurio-registry-rhel8-operator",
            "product": "Red Hat build of Apicurio Registry 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_registry:2"
            ],
            "defaultStatus": "affected",
            "packageName": "apicurio/apicurio-registry-rhel9-operator",
            "product": "Red Hat build of Apicurio Registry 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:5"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/snmp-notifier-rhel8",
            "product": "Red Hat Ceph Storage 5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/snmp-notifier-rhel9",
            "product": "Red Hat Ceph Storage 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/alloy-rhel10",
            "product": "Red Hat Ceph Storage 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:certifications:9"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-certification-preflight",
            "product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/rhcl-operator-bundle",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-client",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-server",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "gpsd",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "oci-seccomp-bpf-hook",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "trustee",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-package-manager",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "host-metering",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "gpsd-minimal",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "runc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-codeflare-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kf-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kube-auth-proxy-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-maas-api-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlflow-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-serving-api-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-rhel8-operator",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/rhai-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_cluster_manager_cli:1"
            ],
            "defaultStatus": "affected",
            "packageName": "ocm-cli-clients/ocm-cli-rhel9",
            "product": "Red Hat OpenShift Cluster Manager CLI",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon-rs",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-prometheus-promu",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kata-containers",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/frr-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-node",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sdn-rhel7",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-golang-builder-container",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "runc",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ocs4/cephcsi-rhel8",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/cephcsi-rhel8",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/udi-rhel9",
            "product": "Red Hat OpenShift Dev Spaces",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:devworkspace"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-rhel9-operator",
            "product": "Red Hat OpenShift Dev Workspaces Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_service_on_aws:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rosa",
            "product": "Red Hat OpenShift on AWS",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-api-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kubevirt",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-golang-builder-container",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-qpid-apache",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "qpid-proton",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-rhel8/osp-director-agent",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "collectd-libpod-stats",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-qpid-apache",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "qpid-proton",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-rhel9/osp-director-agent",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite:el8/yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1"
            ],
            "defaultStatus": "affected",
            "packageName": "qpid-proton",
            "product": "Red Hat Service Interconnect 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:2"
            ],
            "defaultStatus": "affected",
            "packageName": "qpid-proton",
            "product": "Red Hat Service Interconnect 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:2"
            ],
            "defaultStatus": "affected",
            "packageName": "skupper-router",
            "product": "Red Hat Service Interconnect 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-selinuxd-rhel8",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:stf:1.5"
            ],
            "defaultStatus": "affected",
            "packageName": "stf/sg-core-rhel9",
            "product": "Service Telemetry Framework 1.5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-07T19:41:19.285Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1341",
                "description": "Multiple Releases of Same Resource or Handle",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:09:04.755Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
          },
          {
            "name": "RHBZ#2467822",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42079"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41019"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42078"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54757"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56785"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56910"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56852"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60018"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57482"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54552"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42082"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50336"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39810"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42150"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42240"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49703"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49702"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53413"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61313"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54168"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51187"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39272"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22120"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65534"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35832"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34357"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42946"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39573"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:38504"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22112"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39266"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36776"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61253"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57649"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53412"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53415"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22121"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65886"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36617"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34359"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54500"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34364"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56340"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47952"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50843"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41030"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44622"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47149"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53530"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51033"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59467"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43692"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51057"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36625"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36207"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42132"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33574"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40945"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40118"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23264"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54441"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50300"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43038"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65126"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42644"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36648"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56790"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56789"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56913"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56912"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56855"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60025"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57488"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54556"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54584"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54603"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54602"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35994"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35993"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35995"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33120"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33123"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33142"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33150"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54287"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54284"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54286"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54285"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54274"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54283"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50205"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60302"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51341"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36797"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42043"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42047"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42050"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42051"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42049"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42048"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42852"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54435"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46885"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41055"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47735"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59559"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56785: Red Hat OpenShift Container Platform 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56910: Red Hat OpenShift Container Platform 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56852: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60018: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57482: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54552: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50336: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61313: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39272: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22120: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65534: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:38504: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22112: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39266: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36776: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39319: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22121: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65886: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36617: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54500: Compliance Operator 1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44622: Multicluster Global Hub 1.6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59467: OpenShift API for Data Protection 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66022: OpenShift API for Data Protection 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23262: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23264: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56790: Red Hat OpenShift Container Platform 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56789: Red Hat OpenShift Container Platform 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56913: Red Hat OpenShift Container Platform 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56912: Red Hat OpenShift Container Platform 4.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56855: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60025: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57488: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54556: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54584: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35994: Red Hat OpenShift GitOps 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35993: Red Hat OpenShift GitOps 1.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35995: Red Hat OpenShift GitOps 1.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60302: Red Hat OpenStack Services on OpenShift 18.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51341: Red Hat Satellite 6.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51194: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42048: Red Hat Web Terminal 1.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42852: Red Hat multicluster global hub 1.5.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59559: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-07T20:01:34.913Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-07T19:41:19.285Z",
            "value": "Made public."
          }
        ],
        "title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
        "workarounds": [
          {
            "lang": "en",
            "value": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net",
          "product": "net",
          "programRoutines": [
            {
              "name": "cgoResSearch"
            },
            {
              "name": "LookupCNAME"
            },
            {
              "name": "Resolver.LookupCNAME"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.3",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "hamayanhamayan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-415: Double Free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T19:41:19.285Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/78803"
        },
        {
          "url": "https://go.dev/cl/767860"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4981"
        }
      ],
      "title": "Crash when handling long CNAME response in net"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-33811",
    "datePublished": "2026-05-07T19:41:19.285Z",
    "dateReserved": "2026-03-23T20:35:32.814Z",
    "dateUpdated": "2026-09-11T12:09:04.755Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33818 (GCVE-0-2026-33818)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-09-10 16:34

Title

Enforce maximum recursion depth in encoding/asn1

Summary

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:11 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/80405
https://groups.google.com/g/golang-announce/c/94p…
https://go.dev/cl/814980
https://pkg.go.dev/vuln/GO-2026-5972

Impacted products

1 product

Vendor	Product	Version
Go standard library	encoding/asn1	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Credits

Marwan Atia (marwansamir688@gmail.com)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-33818",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:11:19.904646Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:12:34.877Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "encoding/asn1",
          "product": "encoding/asn1",
          "programRoutines": [
            {
              "name": "parseSequenceOf"
            },
            {
              "name": "parseField"
            },
            {
              "name": "UnmarshalWithParams"
            },
            {
              "name": "Unmarshal"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Marwan Atia (marwansamir688@gmail.com)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-10T16:34:27.711Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80405"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://go.dev/cl/814980"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "title": "Enforce maximum recursion depth in encoding/asn1"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-33818",
    "datePublished": "2026-08-13T21:58:52.821Z",
    "dateReserved": "2026-03-23T20:35:32.815Z",
    "dateUpdated": "2026-09-10T16:34:27.711Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39820 (GCVE-0-2026-39820)

Vulnerability from cvelistv5 – Published: 2026-05-07 19:41 – Updated: 2026-09-11 12:09

Title

Quadratic string concatentation in consumeComment in net/mail

Summary

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-08 14:27 UTC

CWE

CWE-407 - Inefficient Algorithmic Complexity
CWE-606 - Unchecked Input for Loop Condition

Assigner

Go Google root

References

88 references

URL	Tags
https://go.dev/issue/78566
https://go.dev/cl/759940
https://groups.google.com/g/golang-announce/c/qcC…
https://pkg.go.dev/vuln/GO-2026-4986
https://access.redhat.com/security/cve/CVE-2026-39820	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2467820	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:59830	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56852	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60018	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57482	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54552	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57845	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57914	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57401	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54883	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49702	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65335	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66327	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22120	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65534	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65116	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65895	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22112	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62407	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61253	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62754	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57649	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62753	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51112	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65336	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62803	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22121	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62406	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65886	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65117	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65153	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34364	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56340	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47952	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50843	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51033	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59467	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43692	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36625	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36754	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33574	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23264	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43038	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42644	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59833	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56789	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56854	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60023	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57487	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54555	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54583	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54602	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62260	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33120	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33123	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33142	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33150	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54287	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54284	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54286	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54285	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54274	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54283	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50205	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41031	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42146	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43052	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36797	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57194	vendor-advisoryx_refsource_REDHAT

Impacted products

166 products

Vendor	Product	Version
Go standard library	net/mail	Affected: 0 , < 1.25.10 (semver) Affected: 1.26.0-0 , < 1.26.3 (semver)
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.26.3-4.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:10.2.6-28.el10_2.5 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.152.1-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:52.1-1.el10_2.2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:165.1-3.el10_2.2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.26.5-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:2.21.0-3.el10_0.4 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:134.1-12.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260518131104.a3795dee , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:9.2.10-33.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:101.5-2.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.26.3-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:10.2.6-23.el9_8.3 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.152.1-2.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:165.1-4.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:52.1-1.el9_8.2 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:76.1-9.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:101.3-4.el9_4.6 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:1.26.5-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:10.2.6-22.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:132.2-12.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:2.21.0-7.el9_6.1 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.12	Unaffected: 0:1.25.5-34.rhaos4.12.git6120b13.el8 , < * (rpm) cpe:/a:redhat:openshift:4.12::el8
Red Hat	Red Hat OpenShift Container Platform 4.12	Unaffected: 0:4.12.0-202608131627.p2.g0e18cfc.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.12::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:1.29.13-12.rhaos4.16.git979a5e6.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.0-202608111505.p2.g41c4e9b.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.0-202608111505.p2.g6f88b58.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.0-202608111505.p2.ga53e9de.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.0-202608111505.p2.ga3ebdc0.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.0-202608111505.p2.g26b43df.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.16::el8
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 0:1.30.14-11.rhaos4.17.git1e2a16d.el8 , < * (rpm) cpe:/a:redhat:openshift:4.17::el8
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 0:4.17.0-202608132055.p2.g4e295fa.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.17::el8
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 0:4.17.0-202608201812.p2.g7189593.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.17::el8
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 0:4.17.0-202608122146.p2.g144bace.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.17::el8
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 0:4.17.0-202608122146.p2.g5bcfbfd.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.17::el8
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 0:4.17.0-202608122146.p2.g8ce997d.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.17::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:1.31.13-11.rhaos4.18.git817a650.el9 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:4.18.0-202608132034.p2.g91c2408.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:4.18.0-202608132034.p2.g6febe61.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:4.18.0-202608121933.p2.gc395190.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:4.18.0-202608121933.p2.g9795abd.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:4.18.0-202608121933.p2.g6ea2356.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 0:1.32.13-9.rhaos4.19.git2100f27.el9 , < * (rpm) cpe:/a:redhat:openshift:4.19::el8
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.19::el8
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.19::el8
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9 , < * (rpm) cpe:/a:redhat:openshift:4.19::el8
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 0:3.31.0-5.rhaos4.19.el9 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Cert Manager support for Red Hat OpenShift release 1.19	Unaffected: 1786613805 , < * (rpm) cpe:/a:redhat:cert_manager:1.19::el9
Red Hat	Logging for Red Hat OpenShift 6	Unaffected: 1785419067 , < * (rpm) cpe:/a:redhat:logging:6.0::el9
Red Hat	Logging for Red Hat OpenShift 6.2	Unaffected: 1784748010 , < * (rpm) cpe:/a:redhat:logging:6.2::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.4	Unaffected: 1782405469 , < * (rpm) cpe:/a:redhat:logging:6.4::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.5	Unaffected: 1786645248 , < * (rpm) cpe:/a:redhat:logging:6.5::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786912006 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	OpenShift API for Data Protection 1.3	Unaffected: 1785177357 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.3::el9
Red Hat	OpenShift API for Data Protection 1.4	Unaffected: 1786946116 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.4::el9
Red Hat	OpenShift API for Data Protection 1.5	Unaffected: 1788860461 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.5::el9
Red Hat	OpenShift API for Data Protection 1.6	Unaffected: 1784058822 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.6::el9
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1783357116 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1783357140 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Developer Hub 1.10	Unaffected: 1783447707 , < * (rpm) cpe:/a:redhat:rhdh:1.10::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1782767215 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Hardened Images	Unaffected: 1.25.11-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 1.26.4-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Migration Toolkit 1.8	Unaffected: 1783953372 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat Migration Toolkit for Applications 8.1	Unaffected: 1785171639 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.1::el9
Red Hat	Red Hat Migration Toolkit for Applications 8.2	Unaffected: 1784211378 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.2::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1783544461 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787102977 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611759 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787562200 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Container Platform 4.12	Unaffected: 1786752886 , < * (rpm) cpe:/a:redhat:openshift:4.12::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 1787002807 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 1786788280 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1787549445 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1786754308 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 1786489910 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 1786494900 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1786496647 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1786573075 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.30	Unaffected: 1787756267 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.30::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.30	Unaffected: 1787756799 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.30::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1785704547 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782222217 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782223341 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782296193 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782222607 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782222163 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782223138 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782222394 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782222451 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782226178 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782224487 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782303211 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782224541 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782223045 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782222366 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782310747 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782222038 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Workload Availability 0.12	Unaffected: 1785202723 , < * (rpm) cpe:/a:redhat:workload_availability_nhc:0.12::el9
Red Hat	Red Hat OpenShift Workload Availability 0.13	Unaffected: 1785203036 , < * (rpm) cpe:/a:redhat:workload_availability_snr:0.13::el9
Red Hat	Red Hat OpenShift Workload Availability 0.3	Unaffected: 1785203474 , < * (rpm) cpe:/a:redhat:workload_availability_sbr:0.3::el9
Red Hat	Red Hat OpenShift Workload Availability 0.7	Unaffected: 1785203508 , < * (rpm) cpe:/a:redhat:workload_availability_mdr:0.7::el9
Red Hat	Red Hat OpenShift Workload Availability 0.8	Unaffected: 1785203079 , < * (rpm) cpe:/a:redhat:workload_availability_far:0.8::el9
Red Hat	Red Hat OpenShift Workload Availability 5.7	Unaffected: 1785202847 , < * (rpm) cpe:/a:redhat:workload_availability_nmo:5.7::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1783750447 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1783751865 , < * (rpm) Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1784351966 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1783955846 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1784125838 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 4-1.4.2 , < * (rpm) Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
Red Hat	ExternalDNS Operator	cpe:/a:redhat:ext_dns_optr:1
Red Hat	External Secrets Operator for Red Hat OpenShift	cpe:/a:redhat:external_secrets_operator:1
Red Hat	File Integrity Operator	cpe:/a:redhat:openshift_file_integrity_operator:1
Red Hat	Gatekeeper 3	cpe:/a:redhat:gatekeeper:3
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4
Red Hat	Multiarch Tuning Operator	cpe:/a:redhat:multiarch_tuning_operator
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Multicluster Global Hub	cpe:/a:redhat:multicluster_globalhub
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Power monitoring for Red Hat OpenShift	cpe:/a:redhat:openshift_power_monitoring
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ceph Storage 5	cpe:/a:redhat:ceph_storage:5
Red Hat	Red Hat Ceph Storage 6	cpe:/a:redhat:ceph_storage:6
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Certification Program for Red Hat Enterprise Linux 9	cpe:/a:redhat:certifications:9
Red Hat	Red Hat Edge Manager 1	cpe:/a:redhat:edge_manager:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat Lightspeed for Runtimes Operator	cpe:/a:redhat:lightspeed_for_runtimes:1
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Cluster Manager CLI	cpe:/a:redhat:openshift_cluster_manager_cli:1
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Openshift Data Foundation 4	cpe:/a:redhat:openshift_data_foundation:4
Red Hat	Red Hat OpenShift Dev Workspaces Operator	cpe:/a:redhat:devworkspace
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Service Interconnect 1	cpe:/a:redhat:service_interconnect:1
Red Hat	Red Hat Service Interconnect 2	cpe:/a:redhat:service_interconnect:2
Red Hat	Security Profiles Operator	cpe:/a:redhat:openshift_security_profiles_operator:1
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1
Red Hat	Zero Trust Workload Identity Manager - Tech Preview	cpe:/a:redhat:zero_trust_workload_identity_manager:0

Credits

thatnealpatel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-39820",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T14:27:51.595266Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T14:27:54.923Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.3-4.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-28.el10_2.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el10_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-3.el10_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.21.0-3.el10_0.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:134.1-12.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "go-toolset:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260518131104.a3795dee",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:9.2.10-33.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.5-2.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.3-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-23.el9_8.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-2.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-4.el9_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el9_8.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:76.1-9.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.3-4.el9_4.6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-22.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:132.2-12.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.21.0-7.el9_6.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.25.5-34.rhaos4.12.git6120b13.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.12.0-202608131627.p2.g0e18cfc.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.29.13-12.rhaos4.16.git979a5e6.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.0-202608111505.p2.g41c4e9b.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.0-202608111505.p2.g6f88b58.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.0-202608111505.p2.ga53e9de.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.0-202608111505.p2.ga3ebdc0.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.0-202608111505.p2.g26b43df.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.30.14-11.rhaos4.17.git1e2a16d.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.17.0-202608132055.p2.g4e295fa.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.17.0-202608201812.p2.g7189593.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.17.0-202608122146.p2.g144bace.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.17.0-202608122146.p2.g5bcfbfd.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.17.0-202608122146.p2.g8ce997d.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.31.13-11.rhaos4.18.git817a650.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-202608132034.p2.g91c2408.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-202608132034.p2.g6febe61.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-202608121933.p2.gc395190.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-202608121933.p2.g9795abd.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-202608121933.p2.g6ea2356.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.32.13-9.rhaos4.19.git2100f27.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.19.43-202608141837.p0.gcd3decf.assembly.4.19.43.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "kata-containers",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.31.0-5.rhaos4.19.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "Cert Manager support for Red Hat OpenShift release 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786613805",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/logging-loki-rhel9",
            "product": "Logging for Red Hat OpenShift 6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785419067",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/logging-loki-rhel9",
            "product": "Logging for Red Hat OpenShift 6.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784748010",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/logging-loki-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift 6.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782405469",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/logging-loki-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift 6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786645248",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786912006",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-plugin-rhel9",
            "product": "OpenShift API for Data Protection 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785177357",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-plugin-rhel9",
            "product": "OpenShift API for Data Protection 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786946116",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788860461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784058822",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783357116",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783357140",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-rhel9-operator",
            "product": "Red Hat Developer Hub 1.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783447707",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-rhel9-operator",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782767215",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-25-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.25.11-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-26-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.26.4-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-controller-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783953372",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785171639",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784211378",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kueue-controller-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783544461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kube-auth-proxy-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787102977",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611759",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787562200",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-installer",
            "product": "Red Hat OpenShift Container Platform 4.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786752886",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sdn-rhel8",
            "product": "Red Hat OpenShift Container Platform 4.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787002807",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sdn-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786788280",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cli-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787549445",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cli-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786754308",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cli-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786489910",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cli-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786494900",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cli-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786496647",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786573075",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.30::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/configbump-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.30",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787756267",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.30::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/traefik-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.30",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787756799",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785704547",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222217",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782223341",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782296193",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222607",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222163",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782223138",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222394",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222451",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782226178",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782224487",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782303211",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782224541",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782223045",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222366",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782310747",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782222038",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785202723",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_snr:0.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/self-node-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_sbr:0.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/storage-based-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203474",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/machine-deletion-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/fence-agents-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203079",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nmo:5.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-maintenance-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 5.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785202847",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783750447",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783751865",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784353904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784125838",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "conforma-cli-stack-v1",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.2",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/assisted-installer-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "build-of-trustee/trustee-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "confidential-compute-attestation-tech-preview/trustee-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "affected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
            "product": "Custom Metric Autoscaler operator for Red Hat Openshift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9-operator",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_file_integrity_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "File Integrity Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "affected",
            "packageName": "gatekeeper/gatekeeper-rhel9-operator",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-rhel9-operator",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "affected",
            "packageName": "lvms4/topolvm-rhel8",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel9",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multiarch_tuning_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
            "product": "Multiarch Tuning Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/addon-manager-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-rhel8",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/backplane-rhel9-operator",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/maestro-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/multicloud-manager-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/placement-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-operator-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/work-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub"
            ],
            "defaultStatus": "unknown",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel8",
            "product": "Multicluster Global Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub"
            ],
            "defaultStatus": "unaffected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-rhel9-operator",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "helm",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines-client",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "kn-workflow-plugin",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-golang-builder-container",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/pilot-rhel8",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-golang-builder-container",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_power_monitoring"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-power-monitoring/power-monitoring-rhel9-operator",
            "product": "Power monitoring for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/config-policy-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/governance-policy-propagator-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/thanos-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform/platform-operator-bundle",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway-proxy-openssl30",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway-proxy-openssl32",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:5"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/rhceph-5-dashboard-rhel8",
            "product": "Red Hat Ceph Storage 5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/rhceph-6-dashboard-rhel9",
            "product": "Red Hat Ceph Storage 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/alloy-rhel10",
            "product": "Red Hat Ceph Storage 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:certifications:9"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-certification-preflight",
            "product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "Red Hat Edge Manager 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-api-rhel9",
            "product": "Red Hat Edge Manager 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/buildah",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/conmon",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/podman",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/skopeo",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_for_runtimes:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
            "product": "Red Hat Lightspeed for Runtimes Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kueue-controller-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-maas-api-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlflow-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-serving-api-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_cluster_manager_cli:1"
            ],
            "defaultStatus": "affected",
            "packageName": "ocm-cli-clients/ocm-cli-rhel9",
            "product": "Red Hat OpenShift Cluster Manager CLI",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ignition",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-node",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-sdn-rhel7",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-golang-builder-container",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ocs4/cephcsi-rhel8",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/cephcsi-rhel8",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:devworkspace"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-rhel9-operator",
            "product": "Red Hat OpenShift Dev Workspaces Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel9",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-api-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kubevirt",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-golang-builder-container",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel8/osp-director-operator-bundle",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel9/osp-director-operator-bundle",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoso-operators/ovn-rhel9-operator",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-builder-rhel9",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1"
            ],
            "defaultStatus": "affected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:2"
            ],
            "defaultStatus": "affected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-security-profiles-rhel8-operator",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-07T19:41:19.854Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-606",
                "description": "Unchecked Input for Loop Condition",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:09:01.543Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-39820"
          },
          {
            "name": "RHBZ#2467820",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39820.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59830"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56852"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60018"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57482"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54552"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57845"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57914"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57401"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54883"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49702"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65335"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66327"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22120"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65534"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65116"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65895"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22112"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62407"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66016"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61253"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62754"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57649"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62753"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51112"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65336"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62803"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22121"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62406"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65886"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65117"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65153"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34364"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56340"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47952"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50843"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51033"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59467"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43692"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36625"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36754"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33574"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23264"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50300"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43038"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42644"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59833"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56789"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56854"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60023"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57487"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54555"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54583"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54602"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62260"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33120"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33123"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33142"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33150"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54287"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54284"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54286"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54285"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54274"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54283"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50205"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41031"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42146"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43052"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36797"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57194"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:59830: Red Hat OpenShift Container Platform 4.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56852: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60018: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57482: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54552: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57845: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57914: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57401: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54883: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65335: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66327: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22120: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63022: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65534: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65116: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65895: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22112: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62407: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66016: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62754: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62753: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51112: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65336: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62803: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22121: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62406: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65886: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65117: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65153: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59467: OpenShift API for Data Protection 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66022: OpenShift API for Data Protection 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23262: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23264: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59833: Red Hat OpenShift Container Platform 4.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56789: Red Hat OpenShift Container Platform 4.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56854: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60023: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57487: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54555: Red Hat OpenShift Container Platform 4.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54583: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62260: Red Hat OpenShift Dev Spaces 3.30"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41031: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42146: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43052: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40262: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-07T20:01:27.800Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-07T19:41:19.854Z",
            "value": "Made public."
          }
        ],
        "title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/mail",
          "product": "net/mail",
          "programRoutines": [
            {
              "name": "addrParser.consumeComment"
            },
            {
              "name": "AddressParser.Parse"
            },
            {
              "name": "AddressParser.ParseList"
            },
            {
              "name": "Header.AddressList"
            },
            {
              "name": "Header.Date"
            },
            {
              "name": "ParseAddress"
            },
            {
              "name": "ParseAddressList"
            },
            {
              "name": "ParseDate"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.3",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "thatnealpatel"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T19:41:19.854Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/78566"
        },
        {
          "url": "https://go.dev/cl/759940"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4986"
        }
      ],
      "title": "Quadratic string concatentation in consumeComment in net/mail"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-39820",
    "datePublished": "2026-05-07T19:41:19.854Z",
    "dateReserved": "2026-04-07T18:13:03.526Z",
    "dateUpdated": "2026-09-11T12:09:01.543Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39821 (GCVE-0-2026-39821)

Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-09-11 12:09

Title

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

Summary

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-23 03:55 UTC

CWE

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Assigner

Go Google root

References

150 references

URL	Tags
https://go.dev/cl/767220
https://go.dev/issue/78760
https://groups.google.com/g/golang-announce/c/iI-…
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-5026
https://access.redhat.com/security/cve/CVE-2026-39821	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2480756	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:42079	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42080	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41019	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42078	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54580	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34789	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42082	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57845	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62549	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42150	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42240	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49702	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56143	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59546	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53413	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63134	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53374	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51187	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37436	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35827	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35826	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65534	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34357	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66432	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39005	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39573	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:38995	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30853	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35830	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35831	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41930	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61253	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65359	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61245	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60354	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57649	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59549	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59562	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60315	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51112	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56223	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:52826	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53415	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57541	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54401	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30854	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37435	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35828	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35829	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65886	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34359	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65153	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39879	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34342	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36808	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34364	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56340	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47952	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50843	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41030	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44622	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47149	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53530	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51033	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43692	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47737	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26546	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26547	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36207	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42132	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42142	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40945	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40118	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33524	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23264	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54441	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43038	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42644	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65126	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36648	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41036	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36820	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35994	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35993	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33155	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33163	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33173	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33183	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54287	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54284	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54286	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54285	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54274	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54283	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44624	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56431	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41031	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42146	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43052	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51341	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36797	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42047	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42050	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42051	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42049	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42048	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42852	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54435	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36105	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36167	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41055	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47735	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30650	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36883	vendor-advisoryx_refsource_REDHAT

Impacted products

309 products

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
Go standard library	net/http/internal/http2	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
golang.org/x/net	golang.org/x/net/idna	Affected: 0 , < 0.55.0 (semver)
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:1.6.6-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el10
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.7.1-5.el10_2.5 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.152.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:5.3.0-7.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:10.2.6-27.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.26.5-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 1:0.3.8-6.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.4.9.2-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.1-2.el10_2.3 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:52.1-1.el10_2.2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.26.5-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.4.7-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 1:0.3.2-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.152.1-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:5.3.0-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:2.21.0-2.el10_0.3 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:134.1-10.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:0.11-1.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.4.1-11.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:9.2.10-31.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:5.1.1-16.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260710105056.a3795dee , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 1:0.2.5-9.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:101.5-2.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.7.1-4.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.152.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:10.2.6-23.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.1.1-17.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.26.5-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:0.2.7-8.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:165.1-4.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:52.1-1.el9_8.2 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:0.2.2-1.el9_2.4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:76.1-7.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:2.15.0-2.el9_2.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:0.152.1-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:2.17.0-2.el9_4.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:101.3-4.el9_4.5 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 1:0.2.4-9.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:1.26.5-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:10.2.6-22.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:2.21.0-7.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:0.152.1-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 1:0.2.7-1.el9_6.5 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:5.1.1-15.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:132.2-10.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 416.94.202609011112-0 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.20::el8
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.22::el8
Red Hat	Red Hat OpenStack Platform 16.2	Unaffected: 0:3.3.23-22.el8ost , < * (rpm) cpe:/a:redhat:openstack:16.2::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 8	Unaffected: 0:0.0.4-1.el8sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el9
Red Hat	Red Hat Satellite 6.17 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.17::el9
Red Hat	Red Hat Satellite 6.18 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	RHEM 1.0 for RHEL 9	Unaffected: 0:1.0.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	RHEM 1.1 for RHEL 10	Unaffected: 0:1.1.3-1.el10em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	RHEM 1.1 for RHEL 9	Unaffected: 0:1.1.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Streams for Apache Kafka 3.2.1	Unaffected: danielqsj-kafka_exporter , < * (rpm) cpe:/a:redhat:amq_streams:3.2::el9
Red Hat	Cert Manager support for Red Hat OpenShift release 1.19	Unaffected: 1786613805 , < * (rpm) cpe:/a:redhat:cert_manager:1.19::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840519 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839981 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839193 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838753 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839279 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840539 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782844225 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839658 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838476 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	DevWorkspace Operator 0.42	Unaffected: 1782401674 , < * (rpm) cpe:/a:redhat:devworkspace:0.42::el9
Red Hat	Logging for Red Hat OpenShift 6	Unaffected: 1785418851 , < * (rpm) cpe:/a:redhat:logging:6.0::el9
Red Hat	Logging for Red Hat OpenShift 6.2	Unaffected: 1784747813 , < * (rpm) cpe:/a:redhat:logging:6.2::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.4	Unaffected: 1782408807 , < * (rpm) cpe:/a:redhat:logging:6.4::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.5	Unaffected: 1786645107 , < * (rpm) cpe:/a:redhat:logging:6.5::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786912006 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783332008 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el8
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783333268 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783985999 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1782477094 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1782308518 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784737366 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784306906 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1783260894 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Multicluster Global Hub 1.4.5	Unaffected: 1784061472 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.4::el9
Red Hat	Multicluster Global Hub 1.6.5	Unaffected: 1784152046 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.6::el9
Red Hat	Multicluster Global Hub 1.7.0	Unaffected: 1784768332 , < * (rpm) Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9
Red Hat	OpenShift API for Data Protection 1.3	Unaffected: 1785180878 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.3::el9
Red Hat	OpenShift API for Data Protection 1.5	Unaffected: 1788860461 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.5::el9
Red Hat	OpenShift API for Data Protection 1.6	Unaffected: 1784058822 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.6::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787685239 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782383730 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782156698 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157632 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157829 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157630 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782382580 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782383255 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782488873 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157507 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782396604 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782382711 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157546 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157471 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157018 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782156920 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782374537 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782383676 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782156860 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782465412 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784652040 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784638644 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784740143 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1781686446 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1781686458 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.11	Unaffected: 1783352589 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.11::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1783962464 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1783917963 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502438 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194574 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784127736 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782804957 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782758407 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782758410 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782754093 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782744816 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782758409 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782744830 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Hardened Images	Unaffected: 1.25.11-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 1.26.4-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Lightspeed (formerly Insights) for Runtimes 1.0	Unaffected: 1786483782 , < * (rpm) cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9
Red Hat	Red Hat Migration Toolkit 1.8	Unaffected: 1783953372 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat Migration Toolkit for Applications 8.1	Unaffected: 1785171639 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.1::el9
Red Hat	Red Hat Migration Toolkit for Applications 8.2	Unaffected: 1784211378 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.2::el9
Red Hat	Red Hat multicluster global hub 1.5.3	Unaffected: 1784127491 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.5::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1783544461 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1784004914 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1783946386 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788312157 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787330073 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787051722 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787102977 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786630755 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786630724 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786630124 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611780 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786612055 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787153683 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787088234 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250508 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251550 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611759 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251250 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786612219 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250617 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787090180 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787089049 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787361677 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057515 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057868 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1784121108 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1783612119 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705347 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706101 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705558 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705646 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706138 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705741 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705777 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705802 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705938 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706577 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706125 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706177 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706188 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706679 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706357 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706612 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706644 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706659 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706880 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932114 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782931768 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932104 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536000 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783535989 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536515 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932521 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018461 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018421 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932812 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537001 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932919 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537586 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932969 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933015 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933042 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537392 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933235 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933251 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537955 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933417 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537742 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933602 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783019377 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934054 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934036 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934284 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1782991491 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775772 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775770 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775834 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784777166 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775793 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775768 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775782 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift GitOps 1.19	Unaffected: 1782292352 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.19::el8
Red Hat	Red Hat OpenShift GitOps 1.20	Unaffected: 1782383826 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.20::el9
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1782287580 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782201833 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782201537 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782201812 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782201466 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Workload Availability 0.12	Unaffected: 1785202723 , < * (rpm) cpe:/a:redhat:workload_availability_nhc:0.12::el9
Red Hat	Red Hat OpenShift Workload Availability 0.13	Unaffected: 1785203036 , < * (rpm) cpe:/a:redhat:workload_availability_snr:0.13::el9
Red Hat	Red Hat OpenShift Workload Availability 0.3	Unaffected: 1785203474 , < * (rpm) cpe:/a:redhat:workload_availability_sbr:0.3::el9
Red Hat	Red Hat OpenShift Workload Availability 0.7	Unaffected: 1785203508 , < * (rpm) cpe:/a:redhat:workload_availability_mdr:0.7::el9
Red Hat	Red Hat OpenShift Workload Availability 0.8	Unaffected: 1785203079 , < * (rpm) cpe:/a:redhat:workload_availability_far:0.8::el9
Red Hat	Red Hat OpenShift Workload Availability 5.7	Unaffected: 1785202847 , < * (rpm) cpe:/a:redhat:workload_availability_nmo:5.7::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1783750447 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1783751865 , < * (rpm) Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1784351966 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1783955846 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.17	Unaffected: 1786181981 , < * (rpm) cpe:/a:redhat:quay:3.17::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1784125838 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Satellite 6.18	Unaffected: 1785923308 , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1785929994 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 4-1.4.2 , < * (rpm) Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Web Terminal 1.11	Unaffected: 1784296203 , < * (rpm) cpe:/a:redhat:webterminal:1.11::el9
Red Hat	Red Hat Web Terminal 1.12	Unaffected: 1784247610 , < * (rpm) cpe:/a:redhat:webterminal:1.12::el9
Red Hat	Red Hat Web Terminal 1.13	Unaffected: 1784296127 , < * (rpm) cpe:/a:redhat:webterminal:1.13::el9
Red Hat	Red Hat Web Terminal 1.14	Unaffected: 1784296114 , < * (rpm) cpe:/a:redhat:webterminal:1.14::el9
Red Hat	Red Hat Web Terminal 1.15	Unaffected: 1784296033 , < * (rpm) cpe:/a:redhat:webterminal:1.15::el9
Red Hat	Red Hat Web Terminal 1.16	Unaffected: 1784295767 , < * (rpm) cpe:/a:redhat:webterminal:1.16::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	Compliance Operator	cpe:/a:redhat:openshift_compliance_operator:1
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Deployment Validation Operator	cpe:/a:redhat:deployment_validator_operator
Red Hat	ExternalDNS Operator	cpe:/a:redhat:ext_dns_optr:1
Red Hat	External Secrets Operator for Red Hat OpenShift	cpe:/a:redhat:external_secrets_operator:1
Red Hat	Fence Agents Remediation Operator	cpe:/a:redhat:workload_availability_far:0
Red Hat	File Integrity Operator	cpe:/a:redhat:openshift_file_integrity_operator:1
Red Hat	Gatekeeper 3	cpe:/a:redhat:gatekeeper:3
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4 cpe:/a:redhat:lvms:5
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4
Red Hat	Machine Deletion Remediation Operator	cpe:/a:redhat:workload_availability_mdr:0
Red Hat	Multiarch Tuning Operator	cpe:/a:redhat:multiarch_tuning_operator
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	Node HealthCheck Operator	cpe:/a:redhat:workload_availability_nhc:0
Red Hat	OpenShift API for Data Protection	cpe:/a:redhat:openshift_api_data_protection:1
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	Power monitoring for Red Hat OpenShift	cpe:/a:redhat:openshift_power_monitoring
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ceph Storage 5	cpe:/a:redhat:ceph_storage:5
Red Hat	Red Hat Ceph Storage 6	cpe:/a:redhat:ceph_storage:6
Red Hat	Red Hat Ceph Storage 8	cpe:/a:redhat:ceph_storage:8
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Certification Program for Red Hat Enterprise Linux 9	cpe:/a:redhat:certifications:9
Red Hat	Red Hat Connectivity Link 1	cpe:/a:redhat:connectivity_link:1
Red Hat	Red Hat Developer Hub	cpe:/a:redhat:rhdh:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat Hardened Images	cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Cluster Manager CLI	cpe:/a:redhat:openshift_cluster_manager_cli:1
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift on AWS	cpe:/a:redhat:openshift_service_on_aws:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Service Interconnect 1	cpe:/a:redhat:service_interconnect:1
Red Hat	Red Hat Service Interconnect 2	cpe:/a:redhat:service_interconnect:2
Red Hat	Security Profiles Operator	cpe:/a:redhat:openshift_security_profiles_operator:1
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1
Red Hat	Zero Trust Workload Identity Manager - Tech Preview	cpe:/a:redhat:zero_trust_workload_identity_manager:0

Credits

KC1zs4 (https://github.com/KC1zs4) Longwei Wang (https://github.com/gn00295120)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.6,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-39821",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-23T03:55:58.522682Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1289",
                "description": "CWE-1289 Improper Validation of Unsafe Equivalence in Input",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-27T13:13:15.606Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-5.el10_2.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.3.0-7.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-27.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.8-6.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.9.2-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-server",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.1-2.el10_2.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el10_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.7-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.2-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.3.0-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.21.0-2.el10_0.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:134.1-10.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-script",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.11-1.el7_9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.4.1-11.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:9.2.10-31.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-16.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "go-toolset:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260710105056.a3795dee",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.5-9.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.5-2.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-4.el9_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-23.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-17.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-8.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-4.el9_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el9_8.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.2-1.el9_2.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:76.1-7.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.15.0-2.el9_2.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.17.0-2.el9_4.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.3-4.el9_4.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.4-9.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-22.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.21.0-7.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-1.el9_6.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-15.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:132.2-10.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "416.94.202609011112-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.3.23-22.el8ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el8sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.17 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.18 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.19 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.0 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el10em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github",
            "product": "Streams for Apache Kafka 3.2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "danielqsj-kafka_exporter",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "Cert Manager support for Red Hat OpenShift release 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786613805",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840519",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839981",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839193",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839279",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840539",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782844225",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839658",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838476",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:devworkspace:0.42::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-rhel9-operator",
            "product": "DevWorkspace Operator 0.42",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782401674",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging for Red Hat OpenShift 6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785418851",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging for Red Hat OpenShift 6.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784747813",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift 6.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782408807",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift 6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786645107",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786912006",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-8-rhel8",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783332008",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783333268",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783985999",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782477094",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/multicloud-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782308518",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/backplane-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784737366",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784306906",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783260894",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.4.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784061472",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784152046",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.7.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784768332",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785775948",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785180878",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788860461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784058822",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/thanos-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787685239",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383730",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-multicluster-observability-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782156698",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-prometheus-config-reloader-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157632",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-prometheus-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157829",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/cluster-backup-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157630",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/endpoint-monitoring-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782382580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/grafana-dashboard-loader-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383255",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/kube-rbac-proxy-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782488873",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/kube-state-metrics-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157507",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/metrics-collector-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782396604",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-observability-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782382711",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/node-exporter-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157546",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/observatorium-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157471",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/observatorium-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157018",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/prometheus-alertmanager-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782156920",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/prometheus-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782374537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/rbac-query-proxy-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383676",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/thanos-receive-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782156860",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/thanos-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782465412",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784652040",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multiclusterhub-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784638644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784740143",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781686446",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781686458",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel9",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783352589",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783962464",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783917963",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502438",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194574",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127736",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/disk-image-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782804957",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-aws-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782758407",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782758410",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782754093",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782744816",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782758409",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782744830",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-25-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.25.11-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-26-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.26.4-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
            "product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786483782",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-controller-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783953372",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785171639",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784211378",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Red Hat multicluster global hub 1.5.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127491",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kueue-controller-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783544461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhel9-operator",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784004914",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-operator-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783946386",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788312157",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-service-operator-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787330073",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-feast-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787051722",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kube-auth-proxy-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787102977",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630755",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630724",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630124",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611780",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612055",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-maas-api-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787153683",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mlflow-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787088234",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-automl-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251550",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611759",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251250",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612219",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250617",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-spark-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787090180",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trainer-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787089049",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787361677",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-controller-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057515",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057868",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-rhel9-operator",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784121108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783612119",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706101",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705558",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706138",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705802",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705938",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706577",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706125",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706177",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706188",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706679",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706357",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706612",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706659",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706880",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782931768",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/devicefinder-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932104",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536000",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783535989",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536515",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932521",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018421",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-blackbox-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537001",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932919",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537586",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932969",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933015",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933042",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-drbd-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537392",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933235",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933251",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537955",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933417",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537742",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933602",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783019377",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934054",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934284",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/udi-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782991491",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-gateway-opa-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775772",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-gateway-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775770",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-jaeger-query-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775834",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-operator-bundle",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784777166",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-query-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775793",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775768",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775782",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel8",
            "product": "Red Hat OpenShift GitOps 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782292352",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel9",
            "product": "Red Hat OpenShift GitOps 1.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383826",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782287580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201833",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201466",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785202723",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_snr:0.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/self-node-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_sbr:0.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/storage-based-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203474",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/machine-deletion-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/fence-agents-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203079",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nmo:5.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-maintenance-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 5.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785202847",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783750447",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783751865",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784353904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786181981",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784125838",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785923308",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785929994",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "conforma-cli-stack-v1",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.2",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296203",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784247610",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296127",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296033",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784295767",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/assisted-installer-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_compliance_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "Compliance Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "build-of-trustee/trustee-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:deployment_validator_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "dvo/deployment-validation-rhel8-operator",
            "product": "Deployment Validation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9-operator",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/far-operator-0-8",
            "product": "Fence Agents Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_file_integrity_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "File Integrity Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "affected",
            "packageName": "gatekeeper/gatekeeper-rhel9-operator",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4",
              "cpe:/a:redhat:lvms:5"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-rhel9-operator",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel8",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel9",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/mdr-operator-0-7",
            "product": "Machine Deletion Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multiarch_tuning_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
            "product": "Multiarch Tuning Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/addon-manager-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-agent-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-api-provider-agent-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-api-provider-kubevirt-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-proxy-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/image-based-install-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/placement-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-operator-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/work-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-cli-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/nhc-operator-0-12",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "OpenShift API for Data Protection",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "OpenShift API for Data Protection",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "helm",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines-client",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-scheduler-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "kn-workflow-plugin",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/logic-rhel9-operator",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-clients",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_power_monitoring"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-power-monitoring/kepler-rhel9",
            "product": "Power monitoring for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/3scale-rhel7-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/3scale-rhel9-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-permission-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-cli-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-cluster-permission-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-must-gather-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-search-indexer-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-search-v2-api-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-search-v2-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-volsync-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/cert-policy-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/config-policy-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/governance-policy-propagator-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/insights-client-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/insights-metrics-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/memcached-exporter-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/search-collector-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/subctl-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/submariner-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform/platform-operator-bundle",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl30",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl32",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:5"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/rhceph-5-dashboard-rhel8",
            "product": "Red Hat Ceph Storage 5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/rhceph-6-dashboard-rhel9",
            "product": "Red Hat Ceph Storage 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/grafana-rhel9",
            "product": "Red Hat Ceph Storage 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/alloy-rhel10",
            "product": "Red Hat Ceph Storage 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:certifications:9"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-certification-preflight",
            "product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/authorino-rhel9",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1"
            ],
            "defaultStatus": "unknown",
            "packageName": "rhdh/rhdh-rhel9-operator",
            "product": "Red Hat Developer Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-client",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openprinting-ipp-usb",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "host-metering",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/buildah",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/conmon",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/podman",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/skopeo",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/toolbox",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-fips1.25",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-codeflare-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kf-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-maas-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mm-rest-proxy-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-serving-api-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-rhel8-operator",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/rhai-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_cluster_manager_cli:1"
            ],
            "defaultStatus": "affected",
            "packageName": "ocm-cli-clients/ocm-cli-rhel9",
            "product": "Red Hat OpenShift Cluster Manager CLI",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "atomic-openshift-service-idler",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon-rs",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-prometheus-promu",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kata-containers",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/frr-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cli",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-kuryr",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-osbs/openshift-golang-builder",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_service_on_aws:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rosa",
            "product": "Red Hat OpenShift on AWS",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kubevirt",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel8/osp-director-agent",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "collectd-libpod-stats",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel9/osp-director-agent",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-openstack-k8s-operators-os-diff",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoso-operators/ovn-rhel9-operator",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite:el8/yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-security-profiles-rhel8-operator",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-22T15:01:21.462Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.2,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1289",
                "description": "Improper Validation of Unsafe Equivalence in Input",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:09:11.607Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
          },
          {
            "name": "RHBZ#2480756",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42079"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42080"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41019"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42078"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54757"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54580"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34789"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42082"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57845"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62549"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42150"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42240"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49702"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56143"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59546"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53413"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63134"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53374"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51187"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30855"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46395"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37436"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35827"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35826"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65534"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34357"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66432"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39005"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39573"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:38995"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30853"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35830"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35831"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66016"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41930"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61253"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65359"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61245"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60354"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57649"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59549"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53412"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59562"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60315"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51112"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56223"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:52826"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53415"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57541"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54401"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30854"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37435"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35828"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35829"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65886"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34359"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65153"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39879"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34342"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36808"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34364"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56340"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47952"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50843"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41030"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44622"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47149"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53530"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51033"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43692"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47737"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26546"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26547"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36207"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42132"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42142"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40945"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40118"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33524"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23264"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54441"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50300"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43038"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42644"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65126"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36648"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41036"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36820"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35994"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35993"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33155"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33160"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33163"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33173"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33183"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54287"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54284"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54286"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54285"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54274"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54283"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44624"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56431"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41031"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42146"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43052"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54395"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51341"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36797"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42043"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42047"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42050"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42051"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42049"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42048"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42852"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54435"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36105"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36167"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41055"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47735"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30650"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36883"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54580: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34789: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57845: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62549: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56143: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59546: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63134: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30855: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37436: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35827: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35826: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65534: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66432: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30853: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35830: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35831: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66016: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65359: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61245: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59549: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59562: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51112: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56223: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:52826: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57541: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30854: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37435: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35828: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35829: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65886: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65153: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36808: DevWorkspace Operator 0.42"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44622: Multicluster Global Hub 1.6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66022: OpenShift API for Data Protection 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26546: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33531: Red Hat Enterprise Linux AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33524: Red Hat Enterprise Linux AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23262: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23264: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35994: Red Hat OpenShift GitOps 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35993: Red Hat OpenShift GitOps 1.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44624: Red Hat OpenShift distributed tracing 3.10.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41031: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42146: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43052: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54395: Red Hat Quay 3.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40262: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51341: Red Hat Satellite 6.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51194: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42048: Red Hat Web Terminal 1.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42852: Red Hat multicluster global hub 1.5.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36105: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36167: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-22T16:00:52.844Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-22T15:01:21.462Z",
            "value": "Made public."
          }
        ],
        "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
        "workarounds": [
          {
            "lang": "en",
            "value": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "idnaASCII"
            },
            {
              "name": "Client.CloseIdleConnections"
            },
            {
              "name": "Client.Do"
            },
            {
              "name": "Client.Get"
            },
            {
              "name": "Client.Head"
            },
            {
              "name": "Client.Post"
            },
            {
              "name": "Client.PostForm"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "Get"
            },
            {
              "name": "Head"
            },
            {
              "name": "Post"
            },
            {
              "name": "PostForm"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "http1ClientConn.Close"
            },
            {
              "name": "http1ClientConn.RoundTrip"
            },
            {
              "name": "http2ClientConn.RoundTrip"
            },
            {
              "name": "http2RoundTripper.RoundTrip"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http/internal/http2",
          "product": "net/http/internal/http2",
          "programRoutines": [
            {
              "name": "authorityAddr"
            },
            {
              "name": "Transport.AddConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "Transport.RoundTripOpt"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/idna",
          "product": "golang.org/x/net/idna",
          "programRoutines": [
            {
              "name": "Profile.process"
            },
            {
              "name": "Profile.ToASCII"
            },
            {
              "name": "Profile.ToUnicode"
            },
            {
              "name": "ToASCII"
            },
            {
              "name": "ToUnicode"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.55.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "KC1zs4 (https://github.com/KC1zs4)"
        },
        {
          "lang": "en",
          "value": "Longwei Wang (https://github.com/gn00295120)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\"."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-1289: Improper Validation of Unsafe Equivalence in Input",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-21T21:01:48.612Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/767220"
        },
        {
          "url": "https://go.dev/issue/78760"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5026"
        }
      ],
      "title": "Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-39821",
    "datePublished": "2026-05-22T15:01:21.462Z",
    "dateReserved": "2026-04-07T18:13:03.526Z",
    "dateUpdated": "2026-09-11T12:09:11.607Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39828 (GCVE-0-2026-39828)

Vulnerability from cvelistv5 – Published: 2026-05-22 02:31 – Updated: 2026-09-11 12:09

Title

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Summary

When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.

Severity

6.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-22 17:43 UTC

CWE

CWE-863 - Incorrect Authorization
CWE-281 - Improper Preservation of Permissions

Assigner

Go Google root

References

56 references

URL	Tags
https://go.dev/issue/79562
https://groups.google.com/g/golang-announce/c/a08…
https://go.dev/cl/781621
https://pkg.go.dev/vuln/GO-2026-5014
https://access.redhat.com/security/cve/CVE-2026-39828	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2480687	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:41019	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:48151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36808	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66521	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51033	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59467	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43692	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46903	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26546	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26547	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36625	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36207	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40945	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40118	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36648	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41036	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51038	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:52857	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:52910	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41031	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42146	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43052	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40972	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40974	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40969	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36797	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37271	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37268	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37272	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37278	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37286	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37296	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46885	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36105	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36167	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41055	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47735	vendor-advisoryx_refsource_REDHAT

Impacted products

157 products

Vendor	Product	Version
golang.org/x/crypto	golang.org/x/crypto/ssh	Affected: 0 , < 0.52.0 (semver)
Red Hat	Cryostat 4 on RHEL 9	Unaffected: 4.2.0-19 , < * (rpm) cpe:/a:redhat:cryostat:4::el9
Red Hat	RHEM 1.0 for RHEL 9	Unaffected: 0:1.0.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	RHEM 1.1 for RHEL 10	Unaffected: 0:1.1.3-1.el10em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	RHEM 1.1 for RHEL 9	Unaffected: 0:1.1.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Cert Manager support for Red Hat OpenShift release 1.19	Unaffected: 1786613805 , < * (rpm) cpe:/a:redhat:cert_manager:1.19::el9
Red Hat	DevWorkspace Operator 0.42	Unaffected: 1782400868 , < * (rpm) cpe:/a:redhat:devworkspace:0.42::el9
Red Hat	DevWorkspace Operator 0.42	Unaffected: 1782401674 , < * (rpm) cpe:/a:redhat:devworkspace:0.42::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.6	Unaffected: 1788439505 , < * (rpm) cpe:/a:redhat:logging:6.6::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1784646026 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911957 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783332008 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el8
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783333268 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783025820 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784646786 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	OpenShift API for Data Protection 1.3	Unaffected: 1785177359 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.3::el9
Red Hat	OpenShift API for Data Protection 1.3	Unaffected: 1785177438 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.3::el9
Red Hat	OpenShift API for Data Protection 1.3	Unaffected: 1785180878 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.3::el9
Red Hat	OpenShift API for Data Protection 1.4	Unaffected: 1786946294 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.4::el9
Red Hat	OpenShift API for Data Protection 1.4	Unaffected: 1786946190 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.4::el9
Red Hat	OpenShift API for Data Protection 1.4	Unaffected: 1786944540 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.4::el9
Red Hat	OpenShift API for Data Protection 1.5	Unaffected: 1788859896 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.5::el9
Red Hat	OpenShift API for Data Protection 1.5	Unaffected: 1788860461 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.5::el9
Red Hat	OpenShift API for Data Protection 1.6	Unaffected: 1784058822 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.6::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1784229508 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1786908777 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1781686446 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1782891812 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1781686458 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1782891789 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.11	Unaffected: 1783352589 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.11::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502022 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502465 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502025 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502494 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502401 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502403 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502023 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502029 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502445 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194638 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194353 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784196588 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784195620 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194309 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194144 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194188 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194653 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194980 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194347 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194971 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784128388 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784128860 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784126780 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784127787 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784126762 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784127762 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784126832 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784126774 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784127791 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784127135 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784126733 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784127775 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787089049 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057515 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057529 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057884 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783058067 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057868 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783058284 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1783612432 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1783611973 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1783612714 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1783611805 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1784121108 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1783612119 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1783612163 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 1785884688 , < * (rpm) cpe:/a:redhat:openshift:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932114 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782931768 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932104 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536000 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783535989 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536515 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932521 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018461 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018421 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932812 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537001 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932919 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537586 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932969 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933015 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933042 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537392 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933235 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933251 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537955 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933417 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537742 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933602 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783019377 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934054 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934036 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934284 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat OpenShift GitOps 1.19	Unaffected: 1785149260 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.19::el8
Red Hat	Red Hat OpenShift GitOps 1.20	Unaffected: 1785211346 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.20::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1783750447 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1783751865 , < * (rpm) Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1784351966 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1783955846 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1784125838 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1783968508 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1783961973 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1783968644 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1783959819 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1783969365 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1783968972 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 4-1.4.2 , < * (rpm) Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 1783330572 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 1783330691 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 1783326690 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 1783332061 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 1783332625 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 1783326847 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 1783183848 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 1782992727 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 1782903492 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	ExternalDNS Operator	cpe:/a:redhat:ext_dns_optr:1
Red Hat	External Secrets Operator for Red Hat OpenShift	cpe:/a:redhat:external_secrets_operator:1
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Openshift Data Foundation 4	cpe:/a:redhat:openshift_data_foundation:4
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift on AWS	cpe:/a:redhat:openshift_service_on_aws:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Trusted Artifact Signer	cpe:/a:redhat:trusted_artifact_signer:1
Red Hat	Security Profiles Operator	cpe:/a:redhat:openshift_security_profiles_operator:1
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1
Red Hat	Zero Trust Workload Identity Manager - Tech Preview	cpe:/a:redhat:zero_trust_workload_identity_manager:0

Credits

NCC Group Cryptography Services, sponsored by Teleport

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 6.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-39828",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T17:43:55.428395Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T17:44:19.986Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4 on RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.2.0-19",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.0 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el10em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-acmesolver-rhel9",
            "product": "Cert Manager support for Red Hat OpenShift release 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786613805",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "Cert Manager support for Red Hat OpenShift release 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786613805",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:devworkspace:0.42::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-project-clone-rhel9",
            "product": "DevWorkspace Operator 0.42",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782400868",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:devworkspace:0.42::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-rhel9-operator",
            "product": "DevWorkspace Operator 0.42",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782401674",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/cluster-logging-rhel9-operator",
            "product": "Logging Subsystem for Red Hat OpenShift 6.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788439505",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784646026",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911957",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-8-rhel8",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783332008",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783333268",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783025820",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784646786",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-mustgather-rhel9",
            "product": "OpenShift API for Data Protection 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785177359",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-restic-restore-helper-rhel9",
            "product": "OpenShift API for Data Protection 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785177438",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785180878",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-mustgather-rhel9",
            "product": "OpenShift API for Data Protection 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786946294",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-restic-restore-helper-rhel9",
            "product": "OpenShift API for Data Protection 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786946190",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786944540",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-mustgather-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788859896",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788860461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784058822",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784229508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786908777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781686446",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782891812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782891812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781686458",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782891789",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782891789",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-rhel9-operator",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783352589",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-alert-exporter-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502022",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-alertmanager-proxy-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502465",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-api-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502025",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-cli-artifacts-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502494",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-db-setup-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502401",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-pam-issuer-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502403",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-periodic-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502022",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-telemetry-gateway-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502023",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-userinfo-proxy-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502029",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-worker-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502445",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-alert-exporter-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194638",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-alertmanager-proxy-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194353",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-api-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784196588",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-cli-artifacts-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784195620",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-db-setup-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194309",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-imagebuilder-api-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194144",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-imagebuilder-worker-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194188",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-pam-issuer-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194653",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-periodic-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194144",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-telemetry-gateway-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194980",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-userinfo-proxy-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-worker-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194971",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-alert-exporter-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784128388",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-alertmanager-proxy-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784128860",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-api-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784126780",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-cli-artifacts-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127787",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-db-setup-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784126762",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-imagebuilder-api-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127762",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-imagebuilder-worker-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784126832",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-pam-issuer-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784126774",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-periodic-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127791",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-telemetry-gateway-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127135",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-userinfo-proxy-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784126733",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-worker-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127775",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trainer-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787089049",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-controller-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057515",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-git-cloner-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057529",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-image-bundler-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057884",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-image-processing-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783058067",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057868",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-webhook-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783058284",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-controller-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783612432",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-git-cloner-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783611973",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-image-bundler-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783612714",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-image-processing-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783611805",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-rhel9-operator",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784121108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783612119",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-webhook-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783612163",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-hyperkube-rhel9",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785884688",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782931768",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/devicefinder-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932104",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536000",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783535989",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536515",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932521",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018421",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-blackbox-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537001",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932919",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537586",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932969",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933015",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933042",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-drbd-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537392",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933235",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933251",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537955",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933417",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537742",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933602",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783019377",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934054",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934284",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel8",
            "product": "Red Hat OpenShift GitOps 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785149260",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel9",
            "product": "Red Hat OpenShift GitOps 1.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785211346",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783750447",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783751865",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784353904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784125838",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-monitor-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783968508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/cosign-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783961973",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/fetch-tsa-certs-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783968644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/gitsign-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783959819",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-cli-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783969365",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/fulcio-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783968972",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-backfill-redis-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783969365",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-server-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783969365",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/timestamp-authority-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783968644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "conforma-cli-stack-v1",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.2",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/ctlog-monitor-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783330572",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-monitor-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783330572",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/cosign-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783330691",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/fetch-tsa-certs-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783326690",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/gitsign-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783332061",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-cli-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783332625",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/fulcio-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783326847",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-backfill-redis-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783332625",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rekor-server-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783332625",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/timestamp-authority-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783326690",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/model-transparency-cli-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783183848",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/model-validation-rhel9-operator",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782992727",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/policy-controller-rhel9-operator",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782903492",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "assisted/agent-preinstall-image-builder-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "edo/external-dns-rhel9",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/azure-service-operator-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-api-provider-azure-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-api-provider-kubevirt-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines-client",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-chains-controller-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-results-api-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-results-watcher-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-plugin-func-func-util-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-clients",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-must-gather-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/volsync-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/alloy-rhel10",
            "product": "Red Hat Ceph Storage 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/buildah",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/podman",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift3/ose-console",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift3/ose-docker-builder",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift3/ose-hyperkube",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift3/ose-tests",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/azure-service-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/lifecycle-agent-operator-bundle",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/lifecycle-agent-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/oc-mirror-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-agent-installer-api-server-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-agent-installer-api-server-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-agent-installer-csr-approver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-agent-installer-orchestrator-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-aws-ebs-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-aws-efs-csi-driver-container-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-azure-cluster-api-controllers-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-azure-disk-csi-driver-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-azure-disk-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-azure-file-csi-driver-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-azure-file-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-baremetal-installer-rhel7",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-baremetal-installer-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-baremetal-installer-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-cluster-capi-rhel8-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-cluster-capi-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-csi-driver-manila-rhel7",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-csi-driver-manila-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-csi-driver-manila-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-csi-driver-nfs-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-csi-external-provisioner-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-docker-builder",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-docker-builder-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-cni-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-daemon-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-intel-netsec-vsp-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-marvell-cp-agent-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-marvell-vsp-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-network-resources-injector-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-dpu-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-hyperkube",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-hypershift-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-ibmcloud-cluster-api-controllers-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-installer",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-installer-altinfra-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-installer-altinfra-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-installer-artifacts",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-installer-artifacts-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-installer-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-kube-proxy-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-machine-api-provider-azure-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-machine-api-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-openstack-cinder-csi-driver-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-openstack-cinder-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-openstack-cloud-controller-manager-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-openstack-cloud-controller-manager-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-ovn-kubernetes-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-powervs-block-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-ptp-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-smb-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-tests",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-tests-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-vmware-vsphere-csi-driver-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-vsphere-csi-driver-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-vsphere-csi-driver-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-vsphere-csi-driver-syncer-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-vsphere-csi-driver-syncer-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel8-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/windows-machine-config-rhel8-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ocs4/cephcsi-rhel8",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/cephcsi-rhel8",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/traefik-rhel9",
            "product": "Red Hat OpenShift Dev Spaces",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4-wincw/windows-machine-config-operator-bundle",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-gitops-1/argocd-agent-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-gitops-1/argocd-agent-rhel9",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-image-updater-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-image-updater-rhel9",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-gitops-1/gitops-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-gitops-1/gitops-rhel8-operator",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-gitops-1/gitops-rhel9",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-gitops-1/gitops-rhel9-operator",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_service_on_aws:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rosa",
            "product": "Red Hat OpenShift on AWS",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-api-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-artifacts-server-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-controller-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-exportproxy-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-exportserver-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-handler-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-launcher-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/virt-operator-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kubevirt",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-googlecode-go-crypto",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel8/osp-director-agent",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel8/osp-director-operator",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel8/osp-director-operator-bundle",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel9/osp-director-agent",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel9/osp-director-operator",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel9/osp-director-operator-bundle",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoso-operators/octavia-rhel9-operator",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoso-operators/prometheus-podman-exporter-rhel9",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-builder-rhel8",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/ec-rhel9",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/policy-controller-rhel9",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rhtas-console-rhel9",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-security-profiles-operator-bundle",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-security-profiles-rhel8-operator",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-server-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-server-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-22T02:31:26.883Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-281",
                "description": "Improper Preservation of Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T12:09:11.238Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-39828"
          },
          {
            "name": "RHBZ#2480687",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39828.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41019"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:48151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36808"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66521"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51033"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59467"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43692"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46903"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26546"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26547"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36625"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36207"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40945"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40118"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36648"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41036"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51038"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:52857"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:52910"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41031"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42146"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43052"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40972"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40974"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40969"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36797"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37271"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37268"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37272"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37278"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37286"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37296"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46885"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36105"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36167"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41055"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47735"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36808: DevWorkspace Operator 0.42"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66521: Logging Subsystem for Red Hat OpenShift 6.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59467: OpenShift API for Data Protection 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66022: OpenShift API for Data Protection 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46903: Red Hat Advanced Cluster Management for Kubernetes 2.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57191: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26546: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51038: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:52857: Red Hat OpenShift GitOps 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:52910: Red Hat OpenShift GitOps 1.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41031: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42146: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43052: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40262: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40972: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40974: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40969: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37271: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37268: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37278: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37286: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37296: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36105: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36167: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-22T04:01:46.775Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-22T02:31:26.883Z",
            "value": "Made public."
          }
        ],
        "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/crypto/ssh",
          "product": "golang.org/x/crypto/ssh",
          "programRoutines": [
            {
              "name": "connection.serverAuthenticate"
            },
            {
              "name": "NewServerConn"
            }
          ],
          "vendor": "golang.org/x/crypto",
          "versions": [
            {
              "lessThan": "0.52.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "NCC Group Cryptography Services, sponsored by Teleport"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-863: Incorrect Authorization",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T02:31:26.883Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79562"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "url": "https://go.dev/cl/781621"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5014"
        }
      ],
      "title": "Invoking  bypass of certificate restrictions in golang.org/x/crypto/ssh"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-39828",
    "datePublished": "2026-05-22T02:31:26.883Z",
    "dateReserved": "2026-04-07T18:13:03.528Z",
    "dateUpdated": "2026-09-11T12:09:11.238Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2026:66022

CVE-2026-15792 (GCVE-0-2026-15792)

CVE-2026-25681 (GCVE-0-2026-25681)

CVE-2026-27136 (GCVE-0-2026-27136)

CVE-2026-27145 (GCVE-0-2026-27145)

CVE-2026-32283 (GCVE-0-2026-32283)

CVE-2026-33811 (GCVE-0-2026-33811)

CVE-2026-33818 (GCVE-0-2026-33818)

CVE-2026-39820 (GCVE-0-2026-39820)

CVE-2026-39821 (GCVE-0-2026-39821)

CVE-2026-39828 (GCVE-0-2026-39828)

Tags

Sightings

Nomenclature