Vulnerability-Lookup

RHSA-2026:6720

Vulnerability from csaf_redhat - Published: 2026-04-06 22:57 - Updated: 2026-04-10 16:29

Summary

Red Hat Security Advisory: Red Hat Quay 3.12.16

Severity

Important

Notes

Topic: Red Hat Quay 3.12.16 is now available with bug fixes.

Details: Quay 3.12.16

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-4598

A flaw was found in jsrsasign. A remote attacker could exploit this vulnerability by providing specially crafted zero or negative inputs to the bnModInverse function within the BigInteger.modInverse implementation. This could lead to an infinite loop, causing a permanent denial of service (DoS) by hanging the process.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1287 - Improper Validation of Specified Type of Input

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2026:6720

Workaround Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

CVE-2026-4599

A flaw was found in jsrsasign. An attacker can exploit an incomplete comparison vulnerability in the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions. By manipulating incorrect comparison checks, an attacker can bias the Digital Signature Algorithm (DSA) nonces during signature generation. This allows the attacker to recover the private key, leading to a critical security compromise.

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-338 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

CVE-2026-4600

A flaw was found in jsrsasign. An attacker can exploit improper verification of cryptographic signatures by supplying malicious domain parameters during the Digital Signature Algorithm (DSA) validation process. This allows the attacker to forge DSA signatures or X.509 certificates, which would then be accepted as legitimate, potentially leading to unauthorized access or data manipulation.

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

CVE-2026-4601

A flaw was found in jsrsasign. An attacker can exploit a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process, specifically within the KJUR.crypto.DSA.signWithMessageHash function. By manipulating the signature generation to force specific values, the library emits an invalid signature without retrying. This vulnerability allows an attacker to recover the private key used for signing.

8.7 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

CWE-325 - Missing Cryptographic Step

CVE-2026-4602

A flaw was found in jsrsasign. A remote attacker can exploit an incorrect conversion between numeric types by providing a negative exponent to the `modPow` function. This vulnerability can force the computation of incorrect modular inverses, which ultimately allows an attacker to bypass signature verification.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-681 - Incorrect Conversion between Numeric Types

CVE-2026-25679

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1286 - Improper Validation of Syntactic Correctness of Input

CVE-2026-28498

A flaw was found in Authlib, a Python library used for building OAuth and OpenID Connect (OIDC) servers. This vulnerability allows a remote attacker to bypass critical integrity checks in OIDC ID Tokens. Specifically, the library's internal hash verification logic fails open when encountering an unsupported cryptographic algorithm, accepting a forged ID Token as valid. This can lead to an authentication bypass, granting unauthorized access to systems relying on Authlib for OIDC authentication.

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-325 - Missing Cryptographic Step

CVE-2026-29063

A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

CVE-2026-30922

An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2026-32597

A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

References

URL

Category

	https://access.redhat.com/errata/RHSA-2026:6720	self
	https://access.redhat.com/security/cve/CVE-2026-25679	external
	https://access.redhat.com/security/cve/CVE-2026-28498	external
	https://access.redhat.com/security/cve/CVE-2026-29063	external
	https://access.redhat.com/security/cve/CVE-2026-30922	external
	https://access.redhat.com/security/cve/CVE-2026-32597	external
	https://access.redhat.com/security/cve/CVE-2026-4598	external
	https://access.redhat.com/security/cve/CVE-2026-4599	external
	https://access.redhat.com/security/cve/CVE-2026-4600	external
	https://access.redhat.com/security/cve/CVE-2026-4601	external
	https://access.redhat.com/security/cve/CVE-2026-4602	external
	https://access.redhat.com/security/updates/classi…	external
	https://security.access.redhat.com/data/csaf/v2/a…	self
	https://access.redhat.com/security/cve/CVE-2026-4598	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2450210	external
	https://www.cve.org/CVERecord?id=CVE-2026-4598	external
	https://nvd.nist.gov/vuln/detail/CVE-2026-4598	external
	https://gist.github.com/Kr0emer/a1bf5cd4547cc630d…	external
	https://github.com/kjur/jsrsasign/commit/ca5b0272…	external
	https://github.com/kjur/jsrsasign/pull/648	external
	https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-1…	external
	https://access.redhat.com/security/cve/CVE-2026-4599	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2450207	external
	https://www.cve.org/CVERecord?id=CVE-2026-4599	external
	https://nvd.nist.gov/vuln/detail/CVE-2026-4599	external
	https://gist.github.com/Kr0emer/081681818b51605c9…	external
	https://github.com/kjur/jsrsasign/commit/ee4b0134…	external
	https://github.com/kjur/jsrsasign/pull/647	external
	https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-1…	external
	https://access.redhat.com/security/cve/CVE-2026-4600	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2450208	external
	https://www.cve.org/CVERecord?id=CVE-2026-4600	external
	https://nvd.nist.gov/vuln/detail/CVE-2026-4600	external
	https://gist.github.com/Kr0emer/bf15ddc097176e951…	external
	https://github.com/kjur/jsrsasign/commit/37b4c06b…	external
	https://github.com/kjur/jsrsasign/pull/646	external
	https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-1…	external
	https://access.redhat.com/security/cve/CVE-2026-4601	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2450209	external
	https://www.cve.org/CVERecord?id=CVE-2026-4601	external
	https://nvd.nist.gov/vuln/detail/CVE-2026-4601	external
	https://gist.github.com/Kr0emer/93789fe6efe5519db…	external
	https://github.com/kjur/jsrsasign/commit/0710e392…	external
	https://github.com/kjur/jsrsasign/pull/645	external
	https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-1…	external
	https://access.redhat.com/security/cve/CVE-2026-4602	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2450206	external
	https://www.cve.org/CVERecord?id=CVE-2026-4602	external
	https://nvd.nist.gov/vuln/detail/CVE-2026-4602	external
	https://gist.github.com/Kr0emer/7ecd2be7d17419e46…	external
	https://github.com/kjur/jsrsasign/commit/5ea1c32b…	external
	https://github.com/kjur/jsrsasign/pull/650	external
	https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-1…	external
	https://access.redhat.com/security/cve/CVE-2026-25679	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2445356	external
	https://www.cve.org/CVERecord?id=CVE-2026-25679	external
	https://nvd.nist.gov/vuln/detail/CVE-2026-25679	external
	https://go.dev/cl/752180	external
	https://go.dev/issue/77578	external
	https://groups.google.com/g/golang-announce/c/Edh…	external
	https://pkg.go.dev/vuln/GO-2026-4601	external
	https://access.redhat.com/security/cve/CVE-2026-28498	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2448182	external
	https://www.cve.org/CVERecord?id=CVE-2026-28498	external
	https://nvd.nist.gov/vuln/detail/CVE-2026-28498	external
	https://github.com/authlib/authlib/commit/b9bb2b2…	external
	https://github.com/authlib/authlib/releases/tag/v1.6.9	external
	https://github.com/authlib/authlib/security/advis…	external
	https://access.redhat.com/security/cve/CVE-2026-29063	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2445291	external
	https://www.cve.org/CVERecord?id=CVE-2026-29063	external
	https://nvd.nist.gov/vuln/detail/CVE-2026-29063	external
	https://github.com/immutable-js/immutable-js/rele…	external
	https://github.com/immutable-js/immutable-js/rele…	external
	https://github.com/immutable-js/immutable-js/rele…	external
	https://github.com/immutable-js/immutable-js/secu…	external
	https://access.redhat.com/security/cve/CVE-2026-30922	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2448553	external
	https://www.cve.org/CVERecord?id=CVE-2026-30922	external
	https://nvd.nist.gov/vuln/detail/CVE-2026-30922	external
	https://github.com/pyasn1/pyasn1/commit/25ad481c1…	external
	https://github.com/pyasn1/pyasn1/security/advisor…	external
	https://access.redhat.com/security/cve/CVE-2026-32597	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2447194	external
	https://www.cve.org/CVERecord?id=CVE-2026-32597	external
	https://nvd.nist.gov/vuln/detail/CVE-2026-32597	external
	https://github.com/jpadilla/pyjwt/security/adviso…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.12.16 is now available with bug fixes.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.12.16",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:6720",
        "url": "https://access.redhat.com/errata/RHSA-2026:6720"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-28498",
        "url": "https://access.redhat.com/security/cve/CVE-2026-28498"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
        "url": "https://access.redhat.com/security/cve/CVE-2026-29063"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
        "url": "https://access.redhat.com/security/cve/CVE-2026-30922"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32597",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32597"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4598",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4598"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4599",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4599"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4600",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4600"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4601",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4601"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4602",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4602"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6720.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Quay 3.12.16",
    "tracking": {
      "current_release_date": "2026-04-10T16:29:18+00:00",
      "generator": {
        "date": "2026-04-10T16:29:18+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.5"
        }
      },
      "id": "RHSA-2026:6720",
      "initial_release_date": "2026-04-06T22:57:46+00:00",
      "revision_history": [
        {
          "date": "2026-04-06T22:57:46+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-06T22:57:54+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-10T16:29:18+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Quay 3.12",
                "product": {
                  "name": "Red Hat Quay 3.12",
                  "product_id": "Red Hat Quay 3.12",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3.12::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774886169"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Abddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885564"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Abdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774886107"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885572"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Ab812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775236144"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3A0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885641"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3Aefa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885604"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256%3A3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775257350"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3Ab227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885546"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3A356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775253092"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ae797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885564"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885572"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3A62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885641"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885604"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3Ab75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885546"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3A82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775253092"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885564"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885572"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3Aba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885641"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885604"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885546"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3Acd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1775253092"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
                  "product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885564"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
                  "product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885572"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
                  "product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256%3A9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885641"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
                  "product_id": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256%3A766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885604"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
                  "product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256%3A11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885546"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
                "product": {
                  "name": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
                  "product_id": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256%3Ac8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1775253092"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64"
        },
        "product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le as a component of Red Hat Quay 3.12",
          "product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        },
        "product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le",
        "relates_to_product_reference": "Red Hat Quay 3.12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-4598",
      "cwe": {
        "id": "CWE-1287",
        "name": "Improper Validation of Specified Type of Input"
      },
      "discovery_date": "2026-03-23T06:01:47.891452+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450210"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jsrsasign. A remote attacker could exploit this vulnerability by providing specially crafted zero or negative inputs to the bnModInverse function within the BigInteger.modInverse implementation. This could lead to an infinite loop, causing a permanent denial of service (DoS) by hanging the process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jsrsasign: jsrsasign: Denial of Service via infinite loop in bnModInverse function with crafted inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "IMPORTANT: A denial of service flaw was found in jsrsasign. This vulnerability allows a remote attacker to cause a permanent denial of service by providing specially crafted zero or negative inputs to the bnModInverse function, leading to an infinite loop. This affects Red Hat Migration Toolkit for Virtualization and Red Hat Quay, which utilize the vulnerable jsrsasign component.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4598"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450210",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450210"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4598",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4598"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4598",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4598"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/Kr0emer/a1bf5cd4547cc630d2dcc5e761de8264",
          "url": "https://gist.github.com/Kr0emer/a1bf5cd4547cc630d2dcc5e761de8264"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/commit/ca5b027240287a1e71fe63019fc4400332594323",
          "url": "https://github.com/kjur/jsrsasign/commit/ca5b027240287a1e71fe63019fc4400332594323"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/pull/648",
          "url": "https://github.com/kjur/jsrsasign/pull/648"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370938",
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370938"
        }
      ],
      "release_date": "2026-03-23T05:00:11.571000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jsrsasign: jsrsasign: Denial of Service via infinite loop in bnModInverse function with crafted inputs"
    },
    {
      "cve": "CVE-2026-4599",
      "cwe": {
        "id": "CWE-338",
        "name": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"
      },
      "discovery_date": "2026-03-23T06:01:34.008562+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450207"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jsrsasign. An attacker can exploit an incomplete comparison vulnerability in the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions. By manipulating incorrect comparison checks, an attacker can bias the Digital Signature Algorithm (DSA) nonces during signature generation. This allows the attacker to recover the private key, leading to a critical security compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4599"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450207",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450207"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4599",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4599"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4599",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4599"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20",
          "url": "https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1",
          "url": "https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/pull/647",
          "url": "https://github.com/kjur/jsrsasign/pull/647"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939",
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939"
        }
      ],
      "release_date": "2026-03-23T05:00:12.522000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces"
    },
    {
      "cve": "CVE-2026-4600",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-03-23T06:01:39.334925+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450208"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jsrsasign. An attacker can exploit improper verification of cryptographic signatures by supplying malicious domain parameters during the Digital Signature Algorithm (DSA) validation process. This allows the attacker to forge DSA signatures or X.509 certificates, which would then be accepted as legitimate, potentially leading to unauthorized access or data manipulation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "IMPORTANT. The flaw in jsrsasign allows an attacker to forge Digital Signature Algorithm (DSA) signatures or X.509 certificates by providing malicious domain parameters during validation. This could lead to unauthorized access or data manipulation in affected Red Hat products such as Migration Toolkit for Virtualization and Red Hat Quay, where jsrsasign is utilized for cryptographic signature verification.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4600"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450208",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450208"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4600",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4600"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4600",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4600"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7",
          "url": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60",
          "url": "https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/pull/646",
          "url": "https://github.com/kjur/jsrsasign/pull/646"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940",
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940"
        }
      ],
      "release_date": "2026-03-23T05:00:08.475000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters"
    },
    {
      "cve": "CVE-2026-4601",
      "cwe": {
        "id": "CWE-325",
        "name": "Missing Cryptographic Step"
      },
      "discovery_date": "2026-03-23T06:01:44.014846+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450209"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jsrsasign. An attacker can exploit a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process, specifically within the KJUR.crypto.DSA.signWithMessageHash function. By manipulating the signature generation to force specific values, the library emits an invalid signature without retrying. This vulnerability allows an attacker to recover the private key used for signing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "IMPORTANT: A flaw in the jsrsasign library allows for private key recovery due to a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process. An attacker can manipulate signature generation within the KJUR.crypto.DSA.signWithMessageHash function to force specific values, enabling the recovery of the private key. This impacts Red Hat products utilizing jsrsasign, such as Migration Toolkit for Virtualization and Red Hat Quay.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4601"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450209",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450209"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4601",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4601"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4601",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4601"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/Kr0emer/93789fe6efe5519db9692d4ad1dad586",
          "url": "https://gist.github.com/Kr0emer/93789fe6efe5519db9692d4ad1dad586"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/commit/0710e392ec35de697ce11e4219c988ba2b5fe0eb",
          "url": "https://github.com/kjur/jsrsasign/commit/0710e392ec35de697ce11e4219c988ba2b5fe0eb"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/pull/645",
          "url": "https://github.com/kjur/jsrsasign/pull/645"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941",
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941"
        }
      ],
      "release_date": "2026-03-23T05:00:13.312000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing"
    },
    {
      "cve": "CVE-2026-4602",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "discovery_date": "2026-03-23T06:01:28.729668+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450206"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jsrsasign. A remote attacker can exploit an incorrect conversion between numeric types by providing a negative exponent to the `modPow` function. This vulnerability can force the computation of incorrect modular inverses, which ultimately allows an attacker to bypass signature verification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an IMPORTANT flaw. The `jsrsasign` library, as used in Red Hat products such as Migration Toolkit for Virtualization and Red Hat Quay, is vulnerable to a signature verification bypass. A remote attacker could provide a specially crafted negative exponent to the `modPow` function, leading to incorrect modular inverse computations and allowing them to bypass signature verification.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4602"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450206",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450206"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4602",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4602"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4602",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4602"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5",
          "url": "https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195",
          "url": "https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195"
        },
        {
          "category": "external",
          "summary": "https://github.com/kjur/jsrsasign/pull/650",
          "url": "https://github.com/kjur/jsrsasign/pull/650"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175",
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175"
        }
      ],
      "release_date": "2026-03-23T05:00:10.567000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling"
    },
    {
      "cve": "CVE-2026-25679",
      "cwe": {
        "id": "CWE-1286",
        "name": "Improper Validation of Syntactic Correctness of Input"
      },
      "discovery_date": "2026-03-06T22:02:11.567841+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445356"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445356",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/752180",
          "url": "https://go.dev/cl/752180"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77578",
          "url": "https://go.dev/issue/77578"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4601",
          "url": "https://pkg.go.dev/vuln/GO-2026-4601"
        }
      ],
      "release_date": "2026-03-06T21:28:14.211000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
    },
    {
      "cve": "CVE-2026-28498",
      "cwe": {
        "id": "CWE-325",
        "name": "Missing Cryptographic Step"
      },
      "discovery_date": "2026-03-16T19:02:00.128339+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448182"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Authlib, a Python library used for building OAuth and OpenID Connect (OIDC) servers. This vulnerability allows a remote attacker to bypass critical integrity checks in OIDC ID Tokens. Specifically, the library\u0027s internal hash verification logic fails open when encountering an unsupported cryptographic algorithm, accepting a forged ID Token as valid. This can lead to an authentication bypass, granting unauthorized access to systems relying on Authlib for OIDC authentication.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "authlib: Authlib: Authentication bypass via forged OpenID Connect ID Tokens",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This IMPORTANT vulnerability in Authlib allows attackers to bypass OIDC ID Token integrity verification. The at_hash and c_hash validation fails open for unknown algorithms, accepting forged tokens as valid. Exploitation requires no authentication or user interaction. Impact is high to confidentiality and integrity. Red Hat products using Authlib for OIDC validation are affected. Fixed in version 1.6.9.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-28498"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448182",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448182"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-28498",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-28498"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28498",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28498"
        },
        {
          "category": "external",
          "summary": "https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b",
          "url": "https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b"
        },
        {
          "category": "external",
          "summary": "https://github.com/authlib/authlib/releases/tag/v1.6.9",
          "url": "https://github.com/authlib/authlib/releases/tag/v1.6.9"
        },
        {
          "category": "external",
          "summary": "https://github.com/authlib/authlib/security/advisories/GHSA-m344-f55w-2m6j",
          "url": "https://github.com/authlib/authlib/security/advisories/GHSA-m344-f55w-2m6j"
        }
      ],
      "release_date": "2026-03-16T18:03:28.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "authlib: Authlib: Authentication bypass via forged OpenID Connect ID Tokens"
    },
    {
      "cve": "CVE-2026-29063",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-03-06T19:00:57.982727+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2445291"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-29063"
        },
        {
          "category": "external",
          "summary": "RHBZ#2445291",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
          "url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
        }
      ],
      "release_date": "2026-03-06T18:25:22.438000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
    },
    {
      "cve": "CVE-2026-30922",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-03-18T04:02:45.401296+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448553"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-30922"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448553",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
          "url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
        }
      ],
      "release_date": "2026-03-18T02:29:45.857000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
    },
    {
      "cve": "CVE-2026-32597",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-03-12T22:01:29.967713+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2447194"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 \u00a74.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
          "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32597"
        },
        {
          "category": "external",
          "summary": "RHBZ#2447194",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32597",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32597"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f",
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
        }
      ],
      "release_date": "2026-03-12T21:41:50.427000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-06T22:57:46+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:6720"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
            "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)"
    }
  ]
}

CVE-2026-28498 (GCVE-0-2026-28498)

Vulnerability from cvelistv5 – Published: 2026-03-16 18:03 – Updated: 2026-03-16 18:14

Title

Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding

Summary

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a library-level vulnerability was identified in the Authlib Python library concerning the validation of OpenID Connect (OIDC) ID Tokens. Specifically, the internal hash verification logic (_verify_hash) responsible for validating the at_hash (Access Token Hash) and c_hash (Authorization Code Hash) claims exhibits a fail-open behavior when encountering an unsupported or unknown cryptographic algorithm. This flaw allows an attacker to bypass mandatory integrity protections by supplying a forged ID Token with a deliberately unrecognized alg header parameter. The library intercepts the unsupported state and silently returns True (validation passed), inherently violating fundamental cryptographic design principles and direct OIDC specifications. This issue has been patched in version 1.6.9.

Severity ?

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

CWE

CWE-354 - Improper Validation of Integrity Check Value
CWE-573 - Improper Following of Specification by Caller

Assigner

GitHub_M

References

URL

Tags

	https://github.com/authlib/authlib/security/advis…	x_refsource_CONFIRM
	https://github.com/authlib/authlib/commit/b9bb2b2…	x_refsource_MISC
	https://github.com/authlib/authlib/releases/tag/v1.6.9	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	authlib	authlib	Affected: < 1.6.9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28498",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-16T18:14:21.039703Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-16T18:14:42.149Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "authlib",
          "vendor": "authlib",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.6.9"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a library-level vulnerability was identified in the Authlib Python library concerning the validation of OpenID Connect (OIDC) ID Tokens. Specifically, the internal hash verification logic (_verify_hash) responsible for validating the at_hash (Access Token Hash) and c_hash (Authorization Code Hash) claims exhibits a fail-open behavior when encountering an unsupported or unknown cryptographic algorithm. This flaw allows an attacker to bypass mandatory integrity protections by supplying a forged ID Token with a deliberately unrecognized alg header parameter. The library intercepts the unsupported state and silently returns True (validation passed), inherently violating fundamental cryptographic design principles and direct OIDC specifications. This issue has been patched in version 1.6.9."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-354",
              "description": "CWE-354: Improper Validation of Integrity Check Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-573",
              "description": "CWE-573: Improper Following of Specification by Caller",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-16T18:03:28.821Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/authlib/authlib/security/advisories/GHSA-m344-f55w-2m6j",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/authlib/authlib/security/advisories/GHSA-m344-f55w-2m6j"
        },
        {
          "name": "https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b"
        },
        {
          "name": "https://github.com/authlib/authlib/releases/tag/v1.6.9",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/authlib/authlib/releases/tag/v1.6.9"
        }
      ],
      "source": {
        "advisory": "GHSA-m344-f55w-2m6j",
        "discovery": "UNKNOWN"
      },
      "title": "Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-28498",
    "datePublished": "2026-03-16T18:03:28.821Z",
    "dateReserved": "2026-02-27T20:57:47.708Z",
    "dateUpdated": "2026-03-16T18:14:42.149Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25679 (GCVE-0-2026-25679)

Vulnerability from cvelistv5 – Published: 2026-03-06 21:28 – Updated: 2026-03-10 13:37

Title

Incorrect parsing of IPv6 host literals in net/url

Summary

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-1286 - Improper Validation of Syntactic Correctness of Input

Assigner

References

URL

Tags

	https://go.dev/cl/752180
	https://go.dev/issue/77578
	https://groups.google.com/g/golang-announce/c/Edh…
	https://pkg.go.dev/vuln/GO-2026-4601

Impacted products

	Vendor	Product	Version
	Go standard library	net/url	Affected: 0 , < 1.25.8 (semver) Affected: 1.26.0-0 , < 1.26.1 (semver)

Credits

Masaki Hara (https://github.com/qnighy) of Wantedly

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-25679",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-10T13:36:26.554241Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-10T13:37:02.459Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/url",
          "product": "net/url",
          "programRoutines": [
            {
              "name": "parseHost"
            },
            {
              "name": "JoinPath"
            },
            {
              "name": "Parse"
            },
            {
              "name": "ParseRequestURI"
            },
            {
              "name": "URL.Parse"
            },
            {
              "name": "URL.UnmarshalBinary"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.8",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.1",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Masaki Hara (https://github.com/qnighy) of Wantedly"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "url.Parse insufficiently validated the host/authority component and accepted some invalid URLs."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-1286: Improper Validation of Syntactic Correctness of Input",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-06T21:28:14.211Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/752180"
        },
        {
          "url": "https://go.dev/issue/77578"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4601"
        }
      ],
      "title": "Incorrect parsing of IPv6 host literals in net/url"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-25679",
    "datePublished": "2026-03-06T21:28:14.211Z",
    "dateReserved": "2026-02-05T01:33:41.943Z",
    "dateUpdated": "2026-03-10T13:37:02.459Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-29063 (GCVE-0-2026-29063)

Vulnerability from cvelistv5 – Published: 2026-03-06 18:25 – Updated: 2026-03-06 19:33

Title

Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

Summary

Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.

Severity ?

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Assigner

GitHub_M

References

URL

Tags

	https://github.com/immutable-js/immutable-js/secu…	x_refsource_CONFIRM
	https://github.com/immutable-js/immutable-js/rele…	x_refsource_MISC
	https://github.com/immutable-js/immutable-js/rele…	x_refsource_MISC
	https://github.com/immutable-js/immutable-js/rele…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	immutable-js	immutable-js	Affected: < 3.8.3 Affected: < 4.3.7 Affected: < 5.1.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-29063",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-06T19:32:37.694711Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-06T19:33:31.642Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "immutable-js",
          "vendor": "immutable-js",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.8.3"
            },
            {
              "status": "affected",
              "version": "\u003c 4.3.7"
            },
            {
              "status": "affected",
              "version": "\u003c 5.1.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1321",
              "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-06T18:25:22.438Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
        },
        {
          "name": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
        },
        {
          "name": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
        },
        {
          "name": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
        }
      ],
      "source": {
        "advisory": "GHSA-wf6x-7x77-mvgw",
        "discovery": "UNKNOWN"
      },
      "title": "Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) in immutable"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-29063",
    "datePublished": "2026-03-06T18:25:22.438Z",
    "dateReserved": "2026-03-03T20:51:43.481Z",
    "dateUpdated": "2026-03-06T19:33:31.642Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-4599 (GCVE-0-2026-4599)

Vulnerability from cvelistv5 – Published: 2026-03-23 05:00 – Updated: 2026-03-23 14:39

Summary

Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions in src/crypto-1.1.js; an attacker can recover the private key by exploiting the incorrect compareTo checks that accept out-of-range candidates and thus bias DSA nonces during signature generation.

Severity ?

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-1023 - Incomplete Comparison with Missing Factors

Assigner

snyk

References

URL

Tags

	https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-1…
	https://gist.github.com/Kr0emer/081681818b51605c9…
	https://github.com/kjur/jsrsasign/pull/647
	https://github.com/kjur/jsrsasign/commit/ee4b0134…

Impacted products

	Vendor	Product	Version
	n/a	jsrsasign	Affected: 7.0.0 , < 11.1.1 (semver)

Credits

Kr0emer

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4599",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-23T14:39:36.757966Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-23T14:39:45.496Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "jsrsasign",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "11.1.1",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Kr0emer"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions in src/crypto-1.1.js; an attacker can recover the private key by exploiting the incorrect compareTo checks that accept out-of-range candidates and thus bias DSA nonces during signature generation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitCodeMaturity": "NOT_DEFINED",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1023",
              "description": "Incomplete Comparison with Missing Factors",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-23T05:00:12.522Z",
        "orgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
        "shortName": "snyk"
      },
      "references": [
        {
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939"
        },
        {
          "url": "https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20"
        },
        {
          "url": "https://github.com/kjur/jsrsasign/pull/647"
        },
        {
          "url": "https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
    "assignerShortName": "snyk",
    "cveId": "CVE-2026-4599",
    "datePublished": "2026-03-23T05:00:12.522Z",
    "dateReserved": "2026-03-22T16:25:57.565Z",
    "dateUpdated": "2026-03-23T14:39:45.496Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-4600 (GCVE-0-2026-4600)

Vulnerability from cvelistv5 – Published: 2026-03-23 05:00 – Updated: 2026-03-23 15:53

Summary

Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPublic (and the related DSA/X509 verification flow in src/dsa-2.0.js). An attacker can forge DSA signatures or X.509 certificates that X509.verifySignature() accepts by supplying malicious domain parameters such as g=1, y=1, and a fixed r=1, which make the verification equation true for any hash.

Severity ?

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

snyk

References

URL

Tags

	https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-1…
	https://gist.github.com/Kr0emer/bf15ddc097176e951…
	https://github.com/kjur/jsrsasign/pull/646
	https://github.com/kjur/jsrsasign/commit/37b4c06b…

Impacted products

	Vendor	Product	Version
	n/a	jsrsasign	Affected: 0 , < 11.1.1 (semver)

Credits

Kr0emer

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4600",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-23T14:32:39.569693Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-347",
                "description": "CWE-347 Improper Verification of Cryptographic Signature",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-23T15:53:02.042Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "jsrsasign",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "11.1.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Kr0emer"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPublic (and the related DSA/X509 verification flow in src/dsa-2.0.js). An attacker can forge DSA signatures or X.509 certificates that X509.verifySignature() accepts by supplying malicious domain parameters such as g=1, y=1, and a fixed r=1, which make the verification equation true for any hash."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitCodeMaturity": "PROOF_OF_CONCEPT",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P",
            "version": "3.1"
          },
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "PROOF_OF_CONCEPT",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "Improper Verification of Cryptographic Signature",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-23T05:00:08.475Z",
        "orgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
        "shortName": "snyk"
      },
      "references": [
        {
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940"
        },
        {
          "url": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7"
        },
        {
          "url": "https://github.com/kjur/jsrsasign/pull/646"
        },
        {
          "url": "https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
    "assignerShortName": "snyk",
    "cveId": "CVE-2026-4600",
    "datePublished": "2026-03-23T05:00:08.475Z",
    "dateReserved": "2026-03-22T16:26:03.357Z",
    "dateUpdated": "2026-03-23T15:53:02.042Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-30922 (GCVE-0-2026-30922)

Vulnerability from cvelistv5 – Published: 2026-03-18 02:29 – Updated: 2026-03-21 00:16

Title

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

Summary

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with "Indefinite Length" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-674 - Uncontrolled Recursion

Assigner

GitHub_M

References

URL

Tags

	https://github.com/pyasn1/pyasn1/security/advisor…	x_refsource_CONFIRM
	https://github.com/pyasn1/pyasn1/commit/25ad481c1…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	pyasn1	pyasn1	Affected: < 0.6.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-30922",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-18T20:16:18.738732Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-18T20:17:53.102Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-03-21T00:16:47.028Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/03/20/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pyasn1",
          "vendor": "pyasn1",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.6.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with \"Indefinite Length\" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "CWE-674: Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-18T02:29:45.857Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
        },
        {
          "name": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
        }
      ],
      "source": {
        "advisory": "GHSA-jr27-m4p2-rc6r",
        "discovery": "UNKNOWN"
      },
      "title": "pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-30922",
    "datePublished": "2026-03-18T02:29:45.857Z",
    "dateReserved": "2026-03-07T16:40:05.884Z",
    "dateUpdated": "2026-03-21T00:16:47.028Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-4601 (GCVE-0-2026-4601)

Vulnerability from cvelistv5 – Published: 2026-03-23 05:00 – Updated: 2026-03-23 14:41

Summary

Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation. An attacker can recover the private key by forcing r or s to be zero, so the library emits an invalid signature without retrying, and then solves for x from the resulting signature.

Severity ?

8.7 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:P

CWE

CWE-325 - Missing Cryptographic Step

Assigner

snyk

References

URL

Tags

	https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-1…
	https://gist.github.com/Kr0emer/93789fe6efe5519db…
	https://github.com/kjur/jsrsasign/pull/645
	https://github.com/kjur/jsrsasign/commit/0710e392…

Impacted products

	Vendor	Product	Version
	n/a	jsrsasign	Affected: 0 , < 11.1.1 (semver)

Credits

Kr0emer

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4601",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-23T14:41:01.570897Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-23T14:41:10.087Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "jsrsasign",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "11.1.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Kr0emer"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation. An attacker can recover the private key by forcing r or s to be zero, so the library emits an invalid signature without retrying, and then solves for x from the resulting signature."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitCodeMaturity": "PROOF_OF_CONCEPT",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:P",
            "version": "3.1"
          },
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.4,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "PROOF_OF_CONCEPT",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:H/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-325",
              "description": "Missing Cryptographic Step",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-23T05:00:13.312Z",
        "orgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
        "shortName": "snyk"
      },
      "references": [
        {
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941"
        },
        {
          "url": "https://gist.github.com/Kr0emer/93789fe6efe5519db9692d4ad1dad586"
        },
        {
          "url": "https://github.com/kjur/jsrsasign/pull/645"
        },
        {
          "url": "https://github.com/kjur/jsrsasign/commit/0710e392ec35de697ce11e4219c988ba2b5fe0eb"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
    "assignerShortName": "snyk",
    "cveId": "CVE-2026-4601",
    "datePublished": "2026-03-23T05:00:13.312Z",
    "dateReserved": "2026-03-22T16:26:10.973Z",
    "dateUpdated": "2026-03-23T14:41:10.087Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-4598 (GCVE-0-2026-4598)

Vulnerability from cvelistv5 – Published: 2026-03-23 05:00 – Updated: 2026-03-23 14:37

Summary

Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the process permanently by supplying such crafted values (e.g., modInverse(0, m) or modInverse(-1, m)).

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P

CWE

CWE-835 - Infinite loop

Assigner

snyk

References

URL

Tags

	https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-1…
	https://gist.github.com/Kr0emer/a1bf5cd4547cc630d…
	https://github.com/kjur/jsrsasign/pull/648
	https://github.com/kjur/jsrsasign/commit/ca5b0272…

Impacted products

	Vendor	Product	Version
	n/a	jsrsasign	Affected: 0 , < 11.1.1 (semver)

Credits

Kr0emer

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4598",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-23T14:37:02.606788Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-23T14:37:09.505Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "jsrsasign",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "11.1.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Kr0emer"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the process permanently by supplying such crafted values (e.g., modInverse(0, m) or modInverse(-1, m))."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitCodeMaturity": "PROOF_OF_CONCEPT",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P",
            "version": "3.1"
          },
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "PROOF_OF_CONCEPT",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-835",
              "description": "Infinite loop",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-23T05:00:11.571Z",
        "orgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
        "shortName": "snyk"
      },
      "references": [
        {
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370938"
        },
        {
          "url": "https://gist.github.com/Kr0emer/a1bf5cd4547cc630d2dcc5e761de8264"
        },
        {
          "url": "https://github.com/kjur/jsrsasign/pull/648"
        },
        {
          "url": "https://github.com/kjur/jsrsasign/commit/ca5b027240287a1e71fe63019fc4400332594323"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
    "assignerShortName": "snyk",
    "cveId": "CVE-2026-4598",
    "datePublished": "2026-03-23T05:00:11.571Z",
    "dateReserved": "2026-03-22T16:25:51.590Z",
    "dateUpdated": "2026-03-23T14:37:09.505Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-4602 (GCVE-0-2026-4602)

Vulnerability from cvelistv5 – Published: 2026-03-23 05:00 – Updated: 2026-03-23 14:37

Summary

Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js. An attacker can force the computation of incorrect modular inverses and break signature verification by calling modPow with a negative exponent.

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P

CWE

CWE-681 - Incorrect Conversion between Numeric Types

Assigner

snyk

References

URL

Tags

	https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-1…
	https://gist.github.com/Kr0emer/7ecd2be7d17419e46…
	https://github.com/kjur/jsrsasign/pull/650
	https://github.com/kjur/jsrsasign/commit/5ea1c32b…

Impacted products

	Vendor	Product	Version
	n/a	jsrsasign	Affected: 0 , < 11.1.1 (semver)

Credits

Kr0emer

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4602",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-23T14:37:35.060950Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-23T14:37:39.558Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "jsrsasign",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "11.1.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Kr0emer"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js. An attacker can force the computation of incorrect modular inverses and break signature verification by calling modPow with a negative exponent."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitCodeMaturity": "PROOF_OF_CONCEPT",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P",
            "version": "3.1"
          },
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "PROOF_OF_CONCEPT",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-681",
              "description": "Incorrect Conversion between Numeric Types",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-23T05:00:10.567Z",
        "orgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
        "shortName": "snyk"
      },
      "references": [
        {
          "url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175"
        },
        {
          "url": "https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5"
        },
        {
          "url": "https://github.com/kjur/jsrsasign/pull/650"
        },
        {
          "url": "https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
    "assignerShortName": "snyk",
    "cveId": "CVE-2026-4602",
    "datePublished": "2026-03-23T05:00:10.567Z",
    "dateReserved": "2026-03-22T16:26:15.167Z",
    "dateUpdated": "2026-03-23T14:37:39.558Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-32597 (GCVE-0-2026-32597)

Vulnerability from cvelistv5 – Published: 2026-03-12 21:41 – Updated: 2026-03-13 14:58

Title

PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

Summary

PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC. This vulnerability is fixed in 2.12.0.

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE

CWE-345 - Insufficient Verification of Data Authenticity
CWE-863 - Incorrect Authorization

Assigner

GitHub_M

References

URL

Tags

https://github.com/jpadilla/pyjwt/security/adviso…

x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	jpadilla	pyjwt	Affected: < 2.12.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-32597",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-13T14:48:42.534762Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-13T14:58:58.769Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "pyjwt",
          "vendor": "jpadilla",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 2.12.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 \u00a74.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC. This vulnerability is fixed in 2.12.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-345",
              "description": "CWE-345: Insufficient Verification of Data Authenticity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863: Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-12T21:41:50.427Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
        }
      ],
      "source": {
        "advisory": "GHSA-752w-5fwx-jx9f",
        "discovery": "UNKNOWN"
      },
      "title": "PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-32597",
    "datePublished": "2026-03-12T21:41:50.427Z",
    "dateReserved": "2026-03-12T14:54:24.269Z",
    "dateUpdated": "2026-03-13T14:58:58.769Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:6720

CVE-2026-28498 (GCVE-0-2026-28498)

CVE-2026-25679 (GCVE-0-2026-25679)

CVE-2026-29063 (GCVE-0-2026-29063)

CVE-2026-4599 (GCVE-0-2026-4599)

CVE-2026-4600 (GCVE-0-2026-4600)

CVE-2026-30922 (GCVE-0-2026-30922)

CVE-2026-4601 (GCVE-0-2026-4601)

CVE-2026-4598 (GCVE-0-2026-4598)

CVE-2026-4602 (GCVE-0-2026-4602)

CVE-2026-32597 (GCVE-0-2026-32597)

Tags

Sightings

Nomenclature