RHSA-2026:77269

Vulnerability from csaf_redhat - Published: 2026-10-07 02:49 - Updated: 2026-10-07 20:16
Summary
Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.5 security update
Severity
Important
Notes
Topic: Important: Red Hat OpenShift GitOps v1.21.5 security update
Details: An update is now available for Red Hat OpenShift GitOps. Bug Fix(es) and Enhancement(s): * GITOPS-10364 (ArgoCD server excessively reinitializes OIDC provider (~10x/min) causing continuous session token failures and user logouts after upgrade to GitOps 1.21.0) * GITOPS-10429 ([Regression] openshift-gitops-server goroutine leak triggered by frequent Dex token renewal restarts (v1.21.0))
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64 —
Threats
Impact Important
CVE-2026-41178

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64 —
Threats
Impact Important
CVE-2026-50162

A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link (symlink) traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside the intended working directory. This filesystem boundary bypass allows for arbitrary file creation, potentially leading to unauthorized data modification or system compromise depending on the runtime environment.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64 —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le —
Unresolved product id: Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64 —
Threats
Impact Moderate
CVE-2026-56852

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Fixed 4 products, the same list as for CVE-2026-33818
Known not affected 37 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56854

A flaw was found in golang.org/x/crypto/ssh. The component failed to properly enforce source-address restrictions for several authentication methods, including password and keyboard-interactive callbacks. In applications that misuse the ServerConfig.PublicKeyCallback callback to make security relevant authorization decisions, an attacker with a valid key could bypass network-based access controls to gain additional privileges.

6.8 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-346 - Origin Validation Error
Affected products
Fixed 4 products, the same list as for CVE-2026-50162
Known not affected 37 products, the same list as for CVE-2026-50162
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:77269 self
https://access.redhat.com/security/cve/CVE-2026-33818 external
https://access.redhat.com/security/cve/CVE-2026-41178 external
https://access.redhat.com/security/cve/CVE-2026-50162 external
https://access.redhat.com/security/cve/CVE-2026-56852 external
https://access.redhat.com/security/cve/CVE-2026-56854 external
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-33818 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815 external
https://www.cve.org/CVERecord?id=CVE-2026-33818 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818 external
https://go.dev/cl/814980 external
https://go.dev/issue/80405 external
https://groups.google.com/g/golang-announce/c/94p… external
https://pkg.go.dev/vuln/GO-2026-5972 external
https://access.redhat.com/security/cve/CVE-2026-41178 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484830 external
https://www.cve.org/CVERecord?id=CVE-2026-41178 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41178 external
https://github.com/open-telemetry/opentelemetry-g… external
https://github.com/open-telemetry/opentelemetry-g… external
https://access.redhat.com/security/cve/CVE-2026-50162 self
https://bugzilla.redhat.com/show_bug.cgi?id=2499694 external
https://www.cve.org/CVERecord?id=CVE-2026-50162 external
https://nvd.nist.gov/vuln/detail/CVE-2026-50162 external
https://github.com/oras-project/oras-go/security/… external
https://access.redhat.com/security/cve/CVE-2026-56852 self
https://bugzilla.redhat.com/show_bug.cgi?id=2504233 external
https://www.cve.org/CVERecord?id=CVE-2026-56852 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56852 external
https://go.dev/cl/794100 external
https://go.dev/issue/80142 external
https://pkg.go.dev/vuln/GO-2026-5970 external
https://access.redhat.com/security/cve/CVE-2026-56854 self
https://bugzilla.redhat.com/show_bug.cgi?id=2525639 external
https://www.cve.org/CVERecord?id=CVE-2026-56854 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56854 external
https://go.dev/cl/797040 external
https://go.dev/issue/80213 external
https://pkg.go.dev/vuln/GO-2026-6303 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Important: Red Hat OpenShift GitOps v1.21.5 security update",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "An update is now available for Red Hat OpenShift GitOps.\nBug Fix(es) and Enhancement(s):\n* GITOPS-10364 (ArgoCD server excessively reinitializes OIDC provider (~10x/min) causing continuous session token failures and user logouts after upgrade to GitOps 1.21.0)\n* GITOPS-10429 ([Regression] openshift-gitops-server goroutine leak triggered by frequent Dex token renewal restarts (v1.21.0))",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:77269",
        "url": "https://access.redhat.com/errata/RHSA-2026:77269"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-50162",
        "url": "https://access.redhat.com/security/cve/CVE-2026-50162"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56854",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56854"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.21/",
        "url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.21/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77269.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.5 security update",
    "tracking": {
      "current_release_date": "2026-10-07T20:16:34+00:00",
      "generator": {
        "date": "2026-10-07T20:16:34+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:77269",
      "initial_release_date": "2026-10-07T02:49:38+00:00",
      "revision_history": [
        {
          "date": "2026-10-07T02:49:38+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-07T07:15:55+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-07T20:16:34+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift GitOps 1.21",
                "product": {
                  "name": "Red Hat OpenShift GitOps 1.21",
                  "product_id": "Red Hat OpenShift GitOps 1.21",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_gitops:1.21::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift GitOps"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1791251919"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3A49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1791252092"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel9@sha256%3Aa5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1791261215"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1791260868"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3Ab973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1791251840"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel9@sha256%3A147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1791252544"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel9@sha256%3A92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1791253159"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9@sha256%3A20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1791252015"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9-operator@sha256%3A8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1791255097"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-operator-bundle@sha256%3A1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=1791266371"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel9@sha256%3Aed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1791253104"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1791251919"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3Affa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1791252092"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel9@sha256%3A19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1791261215"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1791260868"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1791251840"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel9@sha256%3A1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1791252544"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel9@sha256%3Acf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1791253159"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9@sha256%3A8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1791252015"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9-operator@sha256%3Aef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1791255097"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel9@sha256%3Aaa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1791253104"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel9@sha256%3Ade9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1791251919"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3Af53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1791252092"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel9@sha256%3A2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1791261215"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel9@sha256%3Aa4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1791260868"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3A2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1791251840"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel9@sha256%3A69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1791252544"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel9@sha256%3Ac74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1791253159"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9@sha256%3Aceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1791252015"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9-operator@sha256%3Ad57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1791255097"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel9@sha256%3Ac2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1791253104"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argo-rollouts-rhel9@sha256%3A47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9\u0026tag=1791251919"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-rhel9@sha256%3Af32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=1791252092"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-agent-rhel9@sha256%3A56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9\u0026tag=1791261215"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-extensions-rhel9@sha256%3A4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9\u0026tag=1791260868"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/argocd-image-updater-rhel9@sha256%3Aabae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9\u0026tag=1791251840"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/console-plugin-rhel9@sha256%3A669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel9\u0026tag=1791252544"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/dex-rhel9@sha256%3A3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel9\u0026tag=1791253159"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9@sha256%3A850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9\u0026tag=1791252015"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/gitops-rhel9-operator@sha256%3A086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator\u0026tag=1791255097"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
                  "product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/must-gather-rhel9@sha256%3A5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel9\u0026tag=1791253104"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64 as a component of Red Hat OpenShift GitOps 1.21",
          "product_id": "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64",
        "relates_to_product_reference": "Red Hat OpenShift GitOps 1.21"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-07T02:49:38+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:77269"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-41178",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-04T16:01:10.300537+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
          "url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
          "url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
        }
      ],
      "release_date": "2026-06-04T14:38:23.707000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-07T02:49:38+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:77269"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
    },
    {
      "cve": "CVE-2026-50162",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-07-01T21:35:45+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499694"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link (symlink) traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside the intended working directory. This filesystem boundary bypass allows for arbitrary file creation, potentially leading to unauthorized data modification or system compromise depending on the runtime environment.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "oras-go: oras-go: File store write outside working directory via symlink traversal",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499694",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499694"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-50162",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50162",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50162"
        },
        {
          "category": "external",
          "summary": "https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv",
          "url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv"
        }
      ],
      "release_date": "2026-07-01T21:35:45+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-07T02:49:38+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:77269"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "oras-go: oras-go: File store write outside working directory via symlink traversal"
    },
    {
      "cve": "CVE-2026-56852",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:56.266823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/794100",
          "url": "https://go.dev/cl/794100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80142",
          "url": "https://go.dev/issue/80142"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5970",
          "url": "https://pkg.go.dev/vuln/GO-2026-5970"
        }
      ],
      "release_date": "2026-07-21T19:18:59.951000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-07T02:49:38+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:77269"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
    },
    {
      "cve": "CVE-2026-56854",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2026-08-28T15:33:34.404578+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2525639"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The component failed to properly enforce source-address restrictions for several authentication methods, including password and keyboard-interactive callbacks. In applications that misuse the ServerConfig.PublicKeyCallback callback to make security relevant authorization decisions, an attacker with a valid key could bypass network-based access controls to gain additional privileges.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability severity is Important due to the requirement that an attacker already have a valid private key. A flaw in golang.org/x/crypto/ssh allows remote attackers to bypass source-address restrictions for certain authentication methods. This would allow an attacker to use a valid key for gaining additional privileges outside of the bounds of the network-based access controls.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
          "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56854"
        },
        {
          "category": "external",
          "summary": "RHBZ#2525639",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525639"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56854",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56854"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56854",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56854"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/797040",
          "url": "https://go.dev/cl/797040"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80213",
          "url": "https://go.dev/issue/80213"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6303",
          "url": "https://pkg.go.dev/vuln/GO-2026-6303"
        }
      ],
      "release_date": "2026-08-28T15:14:26.918000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-07T02:49:38+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:77269"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20_amd64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227_s390x",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12_arm64",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff_ppc64le",
            "Red Hat OpenShift GitOps 1.21:registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.