[{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45386", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-12T00:51:29.087Z", "datePublished": "2026-05-15T20:36:21.773Z", "dateUpdated": "2026-05-15T20:36:21.773Z"}, "containers": {"cna": {"title": "Open WebUI: An IDOR vulnerability exists in the pin_channel_message API endpoint", "problemTypes": [{"descriptions": [{"cweId": "CWE-639", "lang": "en", "description": "CWE-639: Authorization Bypass Through User-Controlled Key", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/open-webui/open-webui/security/advisories/GHSA-5gc6-xhv4-2wg6", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-5gc6-xhv4-2wg6"}], "affected": [{"vendor": "open-webui", "product": "open-webui", "versions": [{"version": "< 0.9.5", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-15T20:36:21.773Z"}, "descriptions": [{"lang": "en", "value": "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, Pin/Unpin is a write operation (modifies the message's is_pinned , pinned_by, pinned_at fields), but in standard channels it only checks read permission, allowing users with read-only access to pin/unpin any message. This vulnerability is fixed in 0.9.5."}], "source": {"advisory": "GHSA-5gc6-xhv4-2wg6", "discovery": "UNKNOWN"}, "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-45386"}]}}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45385", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-12T00:51:29.087Z", "datePublished": "2026-05-15T20:29:36.884Z", "dateUpdated": "2026-05-18T15:56:49.278Z"}, "containers": {"cna": {"title": "Open WebUI: An IDOR vulnerability exists in the update_message_by_id API endpoint", "problemTypes": [{"descriptions": [{"cweId": "CWE-639", "lang": "en", "description": "CWE-639: Authorization Bypass Through User-Controlled Key", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/open-webui/open-webui/security/advisories/GHSA-wwhq-cx22-f7vv", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-wwhq-cx22-f7vv"}], "affected": [{"vendor": "open-webui", "product": "open-webui", "versions": [{"version": "< 0.9.5", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-15T20:29:36.884Z"}, "descriptions": [{"lang": "en", "value": "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, an IDOR vulnerability exists in the Channels feature of Open WebUI, allowing any channel member to modify messages sent by other members (including administrators) within the same channel. In the update_message_by_id function, for group or dm type channels, only the caller's membership in the channel is checked via the is_user_channel_member function, without verifying message ownership. This allows any channel member to modify messages sent by other members within the same channel. This vulnerability is fixed in 0.9.5."}], "source": {"advisory": "GHSA-wwhq-cx22-f7vv", "discovery": "UNKNOWN"}, "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-45385"}]}, "adp": [{"references": [{"url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-wwhq-cx22-f7vv", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-18T15:56:23.211863Z", "id": "CVE-2026-45385", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-18T15:56:49.278Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-44721", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-07T18:04:17.308Z", "datePublished": "2026-05-15T20:02:16.820Z", "dateUpdated": "2026-05-15T20:02:16.820Z"}, "containers": {"cna": {"title": "Open WebUI: Stored XSS via Model Description", "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "lang": "en", "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/open-webui/open-webui/security/advisories/GHSA-gf5m-wcrh-7928", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-gf5m-wcrh-7928"}], "affected": [{"vendor": "open-webui", "product": "open-webui", "versions": [{"version": "< 0.9.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-15T20:02:16.820Z"}, "descriptions": [{"lang": "en", "value": "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a stored cross-site scripting (XSS) vulnerability that allows any authenticated user with model creation permission (workspace.models) to execute arbitrary JavaScript in the browser of any other user (including admins) who views the malicious model in the chat UI. This vulnerability is fixed in 0.9.0."}], "source": {"advisory": "GHSA-gf5m-wcrh-7928", "discovery": "UNKNOWN"}, "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-44721"}]}}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45675", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-12T21:59:25.666Z", "datePublished": "2026-05-15T19:12:57.665Z", "dateUpdated": "2026-05-15T20:20:27.605Z"}, "containers": {"cna": {"title": "Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts", "problemTypes": [{"descriptions": [{"cweId": "CWE-269", "lang": "en", "description": "CWE-269: Improper Privilege Management", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-362", "lang": "en", "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/open-webui/open-webui/security/advisories/GHSA-h3ww-q6xx-w7x3", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-h3ww-q6xx-w7x3"}, {"name": "https://github.com/open-webui/open-webui/pull/23626", "tags": ["x_refsource_MISC"], "url": "https://github.com/open-webui/open-webui/pull/23626"}, {"name": "https://github.com/open-webui/open-webui/commit/96a0b3239b1aadb23fc359bf10849c9ba12fd6ec", "tags": ["x_refsource_MISC"], "url": "https://github.com/open-webui/open-webui/commit/96a0b3239b1aadb23fc359bf10849c9ba12fd6ec"}], "affected": [{"vendor": "open-webui", "product": "open-webui", "versions": [{"version": "< 0.9.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-15T19:12:57.665Z"}, "descriptions": [{"lang": "en", "value": "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, he LDAP and OAuth authentication flows use a TOCTOU (Time-of-Check-Time-of-Use) pattern for first-user admin role assignment. The regular signup handler (signup_handler in auths.py, line 663) was explicitly patched to prevent this race with the comment \"Insert with default role first to avoid TOCTOU race\", but the LDAP and OAuth code paths were never updated with the same fix. This vulnerability is fixed in 0.9.0."}], "source": {"advisory": "GHSA-h3ww-q6xx-w7x3", "discovery": "UNKNOWN"}, "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-45675"}]}, "adp": [{"references": [{"url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-h3ww-q6xx-w7x3", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-15T20:20:06.482198Z", "id": "CVE-2026-45675", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-15T20:20:27.605Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8743", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-05-16T12:38:24.093Z", "datePublished": "2026-05-17T09:00:13.637Z", "dateUpdated": "2026-05-18T14:20:52.691Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-05-17T14:09:19.206Z"}, "title": "Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-285", "lang": "en", "description": "Improper Authorization"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-266", "lang": "en", "description": "Incorrect Privilege Assignment"}]}], "affected": [{"vendor": "n/a", "product": "Open5GS", "versions": [{"version": "2.7.0", "status": "affected"}, {"version": "2.7.1", "status": "affected"}, {"version": "2.7.2", "status": "affected"}, {"version": "2.7.3", "status": "affected"}, {"version": "2.7.4", "status": "affected"}, {"version": "2.7.5", "status": "affected"}, {"version": "2.7.6", "status": "affected"}], "cpes": ["cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*"], "modules": ["AMF/MME"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in Open5GS up to 2.7.6. This impacts the function ran_ue_find_by_amf_ue_ngap_id of the file src/amf/context.c of the component AMF/MME. Performing a manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 5746b8576cfceec18ed87eb7d8cf11b1fb4cd8b1. It is suggested to install a patch to address this issue."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-05-16T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-05-16T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-05-17T16:11:19.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Seungjoon Na (ICSR_KMU)", "type": "finder"}, {"lang": "en", "value": "Jinha Kim (ICSR_KMU)", "type": "finder"}, {"lang": "en", "value": "Seungjoon Na (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "Seungjoon Na (VulDB User)", "type": "analyst"}], "references": [{"url": "https://vuldb.com/vuln/364330", "name": "VDB-364330 | Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/364330/cti", "name": "VDB-364330 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/814559", "name": "Submit #814559 | Open5GS 2.7.6 Incorrect Authorization", "tags": ["third-party-advisory"]}, {"url": "https://github.com/open5gs/open5gs/issues/4498", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/open5gs/open5gs/pull/4553", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/open5gs/open5gs/commit/5746b8576cfceec18ed87eb7d8cf11b1fb4cd8b1", "tags": ["patch"]}, {"url": "https://github.com/open5gs/open5gs/", "tags": ["product"]}], "tags": ["x_open-source"], "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-8743"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-18T14:20:42.468011Z", "id": "CVE-2026-8743", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-18T14:20:52.691Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45246", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-05-11T14:14:49.613Z", "datePublished": "2026-05-18T19:03:34.753Z", "dateUpdated": "2026-05-18T21:28:41.957Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-05-18T19:03:34.753Z"}, "title": "Summarize < 0.15.1 Insecure File Permissions Information Disclosure", "descriptions": [{"lang": "en", "value": "Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite path that allows local users to read sensitive credentials by exploiting default filesystem permissions. When the refresh-free path rewrites the configuration file, it creates the replacement with default process umask permissions instead of preserving the original file permissions, exposing the config file containing API keys and provider credentials to other local users on shared Unix-like systems."}], "tags": ["x_open-source"], "datePublic": "2026-05-11T00:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-732", "description": "Incorrect Permission Assignment for Critical Resource", "type": "CWE"}]}], "affected": [{"defaultStatus": "affected", "vendor": "steipete", "product": "summarize", "repo": "https://github.com/steipete/summarize", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThan": "0.15.1"}, {"status": "unaffected", "version": "9e990193650a23dab73f37d5e1964d574a44098b", "versionType": "git"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 6.8, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 5.5, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}}], "references": [{"url": "https://github.com/steipete/summarize/releases/tag/v0.15.2", "tags": ["release-notes"]}, {"url": "https://github.com/steipete/summarize/pull/217", "tags": ["issue-tracking"]}, {"url": "https://github.com/steipete/summarize/commit/9e990193650a23dab73f37d5e1964d574a44098b", "tags": ["patch"]}, {"url": "https://www.vulncheck.com/advisories/summarize-insecure-file-permissions-information-disclosure", "tags": ["third-party-advisory"]}], "credits": [{"lang": "en", "value": "Chia Min Jun Lennon", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "vulncheck"}, "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-45246"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-18T21:27:09.577230Z", "id": "CVE-2026-45246", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-18T21:28:41.957Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45244", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-05-11T14:14:49.613Z", "datePublished": "2026-05-18T18:57:32.327Z", "dateUpdated": "2026-05-18T18:57:32.327Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-05-18T18:57:32.327Z"}, "title": "Summarize < 0.15.1 Unapproved Browser Automation Execution", "descriptions": [{"lang": "en", "value": "Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invoke enabled extension automation tools such as navigation or debugger-backed actions, bypassing the final user approval step when a user interacts with attacker-controlled content."}], "tags": ["x_open-source"], "datePublic": "2026-05-11T00:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-862", "description": "Missing Authorization", "type": "CWE"}]}], "affected": [{"defaultStatus": "affected", "vendor": "steipete", "product": "summarize", "repo": "https://github.com/steipete/summarize", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThan": "0.15.1"}, {"status": "unaffected", "version": "e64fe3ecd1bb4fdc181dcfa88c96b9e1914ced0e", "versionType": "git"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "LOW", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "LOW", "baseScore": 2.1, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE", "version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 5.4, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"}}], "references": [{"url": "https://github.com/steipete/summarize/releases/tag/v0.15.2", "tags": ["release-notes"]}, {"url": "https://github.com/steipete/summarize/pull/219", "tags": ["issue-tracking"]}, {"url": "https://github.com/steipete/summarize/commit/e64fe3ecd1bb4fdc181dcfa88c96b9e1914ced0e", "tags": ["patch"]}, {"url": "https://www.vulncheck.com/advisories/summarize-unapproved-browser-automation-execution", "tags": ["third-party-advisory"]}], "credits": [{"lang": "en", "value": "Chia Min Jun Lennon", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "vulncheck"}, "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-45244"}]}}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45242", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-05-11T14:14:49.613Z", "datePublished": "2026-05-18T18:52:08.528Z", "dateUpdated": "2026-05-18T19:09:46.659Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-05-18T18:52:08.528Z"}, "title": "Summarize < 0.15.1 Path Traversal via slidesDir Parameter", "descriptions": [{"lang": "en", "value": "Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon endpoint that allows authenticated callers to write files to arbitrary directories by supplying an absolute path or directory traversal sequence in the slidesDir request parameter. Attackers can exploit this to write slide_*.png and slides.json files to any writable directory and subsequently delete matching files at the specified location through repeat extraction."}], "tags": ["x_open-source"], "datePublic": "2026-05-11T00:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-862", "description": "Missing Authorization", "type": "CWE"}]}], "affected": [{"defaultStatus": "affected", "vendor": "steipete", "product": "summarize", "repo": "https://github.com/steipete/summarize", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThan": "0.15.1"}, {"status": "unaffected", "version": "ec8efd63295656fbfe8743620179c489bc5a242f", "versionType": "git"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7.1, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW", "version": "3.1", "baseSeverity": "HIGH", "baseScore": 7.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L"}}], "references": [{"url": "https://github.com/steipete/summarize/releases/tag/v0.15.2", "tags": ["release-notes"]}, {"url": "https://github.com/steipete/summarize/pull/220", "tags": ["issue-tracking"]}, {"url": "https://github.com/steipete/summarize/commit/ec8efd63295656fbfe8743620179c489bc5a242f", "tags": ["patch"]}, {"url": "https://www.vulncheck.com/advisories/summarize-path-traversal-via-slidesdir-parameter", "tags": ["third-party-advisory"]}], "credits": [{"lang": "en", "value": "Chia Min Jun Lennon", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "vulncheck"}, "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-45242"}]}, "adp": [{"references": [{"url": "https://github.com/steipete/summarize/pull/220", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-18T19:09:26.331135Z", "id": "CVE-2026-45242", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-18T19:09:46.659Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45243", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-05-11T14:14:49.613Z", "datePublished": "2026-05-18T18:50:45.838Z", "dateUpdated": "2026-05-18T18:50:45.838Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-05-18T18:50:45.838Z"}, "title": "Summarize < 0.15.1 Browser Extension Missing Authorization via Content Script", "descriptions": [{"lang": "en", "value": "Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script window.postMessage bridge that allows malicious pages to perform unauthorized operations on automation artifacts. Attackers can simulate runtime messages with spoofed sender identifiers to list, read, create, overwrite, or delete automation artifacts scoped to the affected tab without proper authorization checks."}], "tags": ["x_open-source"], "datePublic": "2026-05-11T00:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-862", "description": "Missing Authorization", "type": "CWE"}]}], "affected": [{"defaultStatus": "affected", "vendor": "steipete", "product": "summarize", "repo": "https://github.com/steipete/summarize", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThan": "0.15.1"}, {"status": "unaffected", "version": "357544063af535bd574752622f9eb94be33ee5fd", "versionType": "git"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "LOW", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE", "version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 6.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}}], "references": [{"url": "https://github.com/steipete/summarize/releases/tag/v0.15.2", "tags": ["release-notes"]}, {"url": "https://github.com/steipete/summarize/pull/222", "tags": ["issue-tracking"]}, {"url": "https://github.com/steipete/summarize/commit/357544063af535bd574752622f9eb94be33ee5fd", "tags": ["patch"]}, {"url": "https://www.vulncheck.com/advisories/summarize-browser-extension-missing-authorization-via-content-script", "tags": ["third-party-advisory"]}], "credits": [{"lang": "en", "value": "Chia Min Jun Lennon", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "vulncheck"}, "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-45243"}]}}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45245", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-05-11T14:14:49.613Z", "datePublished": "2026-05-18T19:00:54.115Z", "dateUpdated": "2026-05-18T20:31:54.413Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-05-18T19:00:54.115Z"}, "title": "Summarize < 0.15.1 Unauthorized Daemon Request via Untrusted Events", "descriptions": [{"lang": "en", "value": "Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links, causing the extension to make authenticated daemon requests using stored tokens without verifying event trustworthiness. Attackers can place local or private-network URLs behind hoverable links to route authenticated requests through the daemon, potentially accessing sensitive internal endpoints when users interact with attacker-controlled content."}], "tags": ["x_open-source"], "datePublic": "2026-05-11T00:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-918", "description": "Server-Side Request Forgery (SSRF)", "type": "CWE"}, {"lang": "en", "cweId": "CWE-940", "description": "Improper Verification of Source of a Communication Channel", "type": "CWE"}]}], "affected": [{"defaultStatus": "affected", "vendor": "steipete", "product": "summarize", "repo": "https://github.com/steipete/summarize", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThan": "0.15.1"}, {"status": "unaffected", "version": "ecbb2c414255aa480a15d0d8b205224c14cfdbcb", "versionType": "git"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "LOW", "subConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 4.6, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "version": "3.1", "baseSeverity": "HIGH", "baseScore": 7.4, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N"}}], "references": [{"url": "https://github.com/steipete/summarize/releases/tag/v0.15.2", "tags": ["release-notes"]}, {"url": "https://github.com/steipete/summarize/pull/218", "tags": ["issue-tracking"]}, {"url": "https://github.com/steipete/summarize/commit/ecbb2c414255aa480a15d0d8b205224c14cfdbcb", "tags": ["patch"]}, {"url": "https://www.vulncheck.com/advisories/summarize-unauthorized-daemon-request-via-untrusted-events", "tags": ["third-party-advisory"]}], "credits": [{"lang": "en", "value": "Chia Min Jun Lennon", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "vulncheck"}, "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-45245"}]}, "adp": [{"references": [{"url": "https://github.com/steipete/summarize/pull/218", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-18T20:30:27.411418Z", "id": "CVE-2026-45245", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-18T20:31:54.413Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8730", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-05-16T10:09:06.646Z", "datePublished": "2026-05-17T03:45:09.083Z", "dateUpdated": "2026-05-18T16:39:52.130Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-05-17T03:45:09.083Z"}, "title": "Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-404", "lang": "en", "description": "Denial of Service"}]}], "affected": [{"vendor": "n/a", "product": "Open5GS", "versions": [{"version": "2.7.0", "status": "affected"}, {"version": "2.7.1", "status": "affected"}, {"version": "2.7.2", "status": "affected"}, {"version": "2.7.3", "status": "affected"}, {"version": "2.7.4", "status": "affected"}, {"version": "2.7.5", "status": "affected"}, {"version": "2.7.6", "status": "affected"}], "cpes": ["cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*"], "modules": ["NRF"]}], "descriptions": [{"lang": "en", "value": "A flaw has been found in Open5GS up to 2.7.6. This impacts the function ogs_sbi_nf_instance_set_id in the library /lib/sbi/context.c of the component NRF. Executing a manipulation of the argument nfInstanceId can lead to denial of service. The attack may be performed from remote. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 4, "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-05-16T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-05-16T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-05-16T12:14:20.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "LinJu (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/364319", "name": "VDB-364319 | Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/364319/cti", "name": "VDB-364319 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/808514", "name": "Submit #808514 | Open5gs NRF v2.7.6 Denial of Service", "tags": ["third-party-advisory"]}, {"url": "https://github.com/open5gs/open5gs/issues/4462", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/open5gs/open5gs/", "tags": ["product"]}], "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-8730"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-18T16:39:21.683075Z", "id": "CVE-2026-8730", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-18T16:39:52.130Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8553", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-05-14T05:40:20.657Z", "datePublished": "2026-05-14T19:52:27.191Z", "dateUpdated": "2026-05-14T21:27:25.708Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "148.0.7778.168", "status": "affected", "lessThan": "148.0.7778.168", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Use after free", "cweId": "CWE-416"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-05-14T19:52:27.191Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"}, {"url": "https://issues.chromium.org/issues/498715368"}], "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-8553"}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.1, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-05-14T21:27:23.118047Z", "id": "CVE-2026-8553", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-14T21:27:25.708Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8557", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-05-14T05:40:21.510Z", "datePublished": "2026-05-14T19:52:28.723Z", "dateUpdated": "2026-05-15T03:56:47.325Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "148.0.7778.168", "status": "affected", "lessThan": "148.0.7778.168", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Use after free", "cweId": "CWE-416"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-05-14T19:52:28.723Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"}, {"url": "https://issues.chromium.org/issues/502978647"}], "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-8557"}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-05-14T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-8557"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-15T03:56:47.325Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8558", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-05-14T05:40:21.756Z", "datePublished": "2026-05-14T19:52:16.369Z", "dateUpdated": "2026-05-15T20:03:45.688Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "148.0.7778.168", "status": "affected", "lessThan": "148.0.7778.168", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Out of bounds write in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Out of bounds write", "cweId": "CWE-787"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-05-14T19:52:16.369Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"}, {"url": "https://issues.chromium.org/issues/503425922"}], "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-8558"}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-05-15T03:57:29.354173Z", "id": "CVE-2026-8558", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-15T20:03:45.688Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8537", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-05-14T05:40:17.034Z", "datePublished": "2026-05-14T19:52:21.668Z", "dateUpdated": "2026-05-15T13:47:09.476Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "148.0.7778.168", "status": "affected", "lessThan": "148.0.7778.168", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Insufficient policy enforcement in ViewTransitions in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Insufficient policy enforcement"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-05-14T19:52:21.668Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"}, {"url": "https://issues.chromium.org/issues/495890000"}], "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-8537"}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-942", "lang": "en", "description": "CWE-942 Permissive Cross-domain Policy with Untrusted Domains"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-05-15T13:46:26.832394Z", "id": "CVE-2026-8537", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-15T13:47:09.476Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8532", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-05-14T05:40:15.754Z", "datePublished": "2026-05-14T19:52:19.780Z", "dateUpdated": "2026-05-15T03:56:39.106Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "148.0.7778.168", "status": "affected", "lessThan": "148.0.7778.168", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Integer overflow", "cweId": "CWE-472"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-05-14T19:52:19.780Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"}, {"url": "https://issues.chromium.org/issues/492812194"}], "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-8532"}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-05-14T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-8532"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-15T03:56:39.106Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8533", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-05-14T05:40:16.035Z", "datePublished": "2026-05-14T19:52:20.129Z", "dateUpdated": "2026-05-15T03:57:04.440Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "148.0.7778.168", "status": "affected", "lessThan": "148.0.7778.168", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Use after free", "cweId": "CWE-416"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-05-14T19:52:20.129Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"}, {"url": "https://issues.chromium.org/issues/495247950"}], "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-8533"}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-05-14T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-8533"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-15T03:57:04.440Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8538", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-05-14T05:40:17.244Z", "datePublished": "2026-05-14T19:52:22.021Z", "dateUpdated": "2026-05-14T21:30:26.286Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "148.0.7778.168", "status": "affected", "lessThan": "148.0.7778.168", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform a denial of service via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Insufficient validation of untrusted input", "cweId": "CWE-20"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-05-14T19:52:22.021Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"}, {"url": "https://issues.chromium.org/issues/496415073"}], "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-8538"}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-05-14T21:30:23.708331Z", "id": "CVE-2026-8538", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-14T21:30:26.286Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8540", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-05-14T05:40:17.740Z", "datePublished": "2026-05-14T19:52:22.691Z", "dateUpdated": "2026-05-15T03:56:45.589Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "148.0.7778.168", "status": "affected", "lessThan": "148.0.7778.168", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Type Confusion", "cweId": "CWE-843"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-05-14T19:52:22.691Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"}, {"url": "https://issues.chromium.org/issues/496627235"}], "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-8540"}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-05-14T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-8540"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-15T03:56:45.589Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45667", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-12T21:59:25.666Z", "datePublished": "2026-05-15T21:41:43.155Z", "dateUpdated": "2026-05-18T17:51:53.859Z"}, "containers": {"cna": {"title": "Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)", "problemTypes": [{"descriptions": [{"cweId": "CWE-862", "lang": "en", "description": "CWE-862: Missing Authorization", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/open-webui/open-webui/security/advisories/GHSA-m69w-p7m4-585j", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-m69w-p7m4-585j"}], "affected": [{"vendor": "open-webui", "product": "open-webui", "versions": [{"version": "< 0.8.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-15T21:41:43.155Z"}, "descriptions": [{"lang": "en", "value": "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, GET /api/v1/memories/ef is accessible without authentication and executes request.app.state.EMBEDDING_FUNCTION(...). This allows any unauthenticated caller to trigger embedding generation which can lead to direct cost exposure if a paid provider is used. This vulnerability is fixed in 0.8.0."}], "source": {"advisory": "GHSA-m69w-p7m4-585j", "discovery": "UNKNOWN"}, "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-45667"}]}, "adp": [{"references": [{"url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-m69w-p7m4-585j", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-18T17:51:44.166309Z", "id": "CVE-2026-45667", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-18T17:51:53.859Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45666", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-12T21:59:25.665Z", "datePublished": "2026-05-15T21:07:42.714Z", "dateUpdated": "2026-05-18T16:15:07.445Z"}, "containers": {"cna": {"title": "Open WebUI: Indirect Object Reference (IDOR) in user notes", "problemTypes": [{"descriptions": [{"cweId": "CWE-639", "lang": "en", "description": "CWE-639: Authorization Bypass Through User-Controlled Key", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/open-webui/open-webui/security/advisories/GHSA-x3qm-p8hr-3c3h", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-x3qm-p8hr-3c3h"}], "affected": [{"vendor": "open-webui", "product": "open-webui", "versions": [{"version": "< 0.8.11", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-15T21:07:42.714Z"}, "descriptions": [{"lang": "en", "value": "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the API /api/v1/notes/{note_id} endpoint lacks proper authorization checks, allowing authenticated users to retrieve notes belonging to other users by guessing or enumerating UUIDs. This results in unauthorized disclosure of potentially sensitive or private user data. This vulnerability is fixed in 0.8.11."}], "source": {"advisory": "GHSA-x3qm-p8hr-3c3h", "discovery": "UNKNOWN"}, "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-45666"}]}, "adp": [{"references": [{"url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-x3qm-p8hr-3c3h", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-18T16:14:44.070898Z", "id": "CVE-2026-45666", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-18T16:15:07.445Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45665", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-12T21:59:25.665Z", "datePublished": "2026-05-15T21:42:34.264Z", "dateUpdated": "2026-05-18T19:47:28.613Z"}, "containers": {"cna": {"title": "Open WebUI: Stored XSS in Banner Component via Improper Sanitization Order", "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "lang": "en", "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/open-webui/open-webui/security/advisories/GHSA-cqp4-qqvg-3787", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-cqp4-qqvg-3787"}], "affected": [{"vendor": "open-webui", "product": "open-webui", "versions": [{"version": "< 0.8.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-15T21:42:34.264Z"}, "descriptions": [{"lang": "en", "value": "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Banner component due to an improper sanitization order (specifically, DOMPurify is executed before the marked library). This vulnerability allows a compromised or malicious administrator to plant a malicious payload in the global banner. Crucially, this vector enables Privilege Escalation, as the malicious banner is rendered for all users, including the Super Admin (Primary Admin). Consequently, the payload successfully bypasses the existing security mechanism. An attacker can leverage this to steal the Super Admin's session token This vulnerability is fixed in 0.8.0."}], "source": {"advisory": "GHSA-cqp4-qqvg-3787", "discovery": "UNKNOWN"}, "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-45665"}]}, "adp": [{"references": [{"url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-cqp4-qqvg-3787", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-18T19:46:00.844836Z", "id": "CVE-2026-45665", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-18T19:47:28.613Z"}}]}}, {"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45365", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-12T00:51:29.085Z", "datePublished": "2026-05-15T21:07:12.449Z", "dateUpdated": "2026-05-15T21:07:12.449Z"}, "containers": {"cna": {"title": "Open WebUI: Authenticated users can bypass model access control via exposed query parameter", "problemTypes": [{"descriptions": [{"cweId": "CWE-285", "lang": "en", "description": "CWE-285: Improper Authorization", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/open-webui/open-webui/security/advisories/GHSA-v6qf-75pr-p96m", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-v6qf-75pr-p96m"}], "affected": [{"vendor": "open-webui", "product": "open-webui", "versions": [{"version": "< 0.8.11", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-15T21:07:12.449Z"}, "descriptions": [{"lang": "en", "value": "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, an internal-only bypass_filter parameter is exposed on the /openai/chat/completions and /ollama/api/chat HTTP endpoints via FastAPI query string binding, allowing any authenticated user to append ?bypass_filter=true and bypass model access control checks to invoke admin-restricted models. This vulnerability is fixed in 0.8.11."}], "source": {"advisory": "GHSA-v6qf-75pr-p96m", "discovery": "UNKNOWN"}, "x_gcve": [{"recordType": "advisory", "vulnId": "cve-2026-45365"}]}}}, {"document": {"aggregate_severity": {"namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important"}, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": {"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": {"label": "WHITE", "url": "https://www.first.org/tlp/"}}, "lang": "en", "notes": [{"category": "summary", "text": "An update for runc is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic"}, {"category": "general", "text": "The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.\n\nSecurity Fix(es):\n\n* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n\n* golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)\n\n* crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details"}, {"category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use"}], "publisher": {"category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com"}, "references": [{"category": "self", "summary": "https://access.redhat.com/errata/RHSA-2026:9097", "url": "https://access.redhat.com/errata/RHSA-2026:9097"}, {"category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important"}, {"category": "external", "summary": "2418462", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"}, {"category": "external", "summary": "2434432", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"}, {"category": "external", "summary": "2437111", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"}, {"category": "external", "summary": "2445356", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"}, {"category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9097.json"}], "title": "Red Hat Security Advisory: runc security update", "tracking": {"current_release_date": "2026-05-19T01:23:57+00:00", "generator": {"date": "2026-05-19T01:23:57+00:00", "engine": {"name": "Red Hat SDEngine", "version": "4.8.0"}}, "id": "RHSA-2026:9097", "initial_release_date": "2026-04-20T18:53:07+00:00", "revision_history": [{"date": "2026-04-20T18:53:07+00:00", "number": "1", "summary": "Initial version"}, {"date": "2026-04-20T18:53:07+00:00", "number": "2", "summary": "Last updated version"}, {"date": "2026-05-19T01:23:57+00:00", "number": "3", "summary": "Last generated version"}], "status": "final", "version": "3"}}, "product_tree": {"branches": [{"branches": [{"branches": [{"category": "product_name", "name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product": {"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS", "product_identification_helper": {"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"}}}], "category": "product_family", "name": "Red Hat Enterprise Linux"}, {"branches": [{"category": "product_version", "name": "runc-4:1.2.9-3.el9_6.src", "product": {"name": "runc-4:1.2.9-3.el9_6.src", "product_id": "runc-4:1.2.9-3.el9_6.src", "product_identification_helper": {"purl": "pkg:rpm/redhat/runc@1.2.9-3.el9_6?arch=src&epoch=4"}}}], "category": "architecture", "name": "src"}, {"branches": [{"category": "product_version", "name": "runc-4:1.2.9-3.el9_6.aarch64", "product": {"name": "runc-4:1.2.9-3.el9_6.aarch64", "product_id": "runc-4:1.2.9-3.el9_6.aarch64", "product_identification_helper": {"purl": "pkg:rpm/redhat/runc@1.2.9-3.el9_6?arch=aarch64&epoch=4"}}}, {"category": "product_version", "name": "runc-debugsource-4:1.2.9-3.el9_6.aarch64", "product": {"name": "runc-debugsource-4:1.2.9-3.el9_6.aarch64", "product_id": "runc-debugsource-4:1.2.9-3.el9_6.aarch64", "product_identification_helper": {"purl": "pkg:rpm/redhat/runc-debugsource@1.2.9-3.el9_6?arch=aarch64&epoch=4"}}}, {"category": "product_version", "name": "runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "product": {"name": "runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "product_id": "runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "product_identification_helper": {"purl": "pkg:rpm/redhat/runc-debuginfo@1.2.9-3.el9_6?arch=aarch64&epoch=4"}}}], "category": "architecture", "name": "aarch64"}, {"branches": [{"category": "product_version", "name": "runc-4:1.2.9-3.el9_6.ppc64le", "product": {"name": "runc-4:1.2.9-3.el9_6.ppc64le", "product_id": "runc-4:1.2.9-3.el9_6.ppc64le", "product_identification_helper": {"purl": "pkg:rpm/redhat/runc@1.2.9-3.el9_6?arch=ppc64le&epoch=4"}}}, {"category": "product_version", "name": "runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "product": {"name": "runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "product_id": "runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "product_identification_helper": {"purl": "pkg:rpm/redhat/runc-debugsource@1.2.9-3.el9_6?arch=ppc64le&epoch=4"}}}, {"category": "product_version", "name": "runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "product": {"name": "runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "product_id": "runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "product_identification_helper": {"purl": "pkg:rpm/redhat/runc-debuginfo@1.2.9-3.el9_6?arch=ppc64le&epoch=4"}}}], "category": "architecture", "name": "ppc64le"}, {"branches": [{"category": "product_version", "name": "runc-4:1.2.9-3.el9_6.x86_64", "product": {"name": "runc-4:1.2.9-3.el9_6.x86_64", "product_id": "runc-4:1.2.9-3.el9_6.x86_64", "product_identification_helper": {"purl": "pkg:rpm/redhat/runc@1.2.9-3.el9_6?arch=x86_64&epoch=4"}}}, {"category": "product_version", "name": "runc-debugsource-4:1.2.9-3.el9_6.x86_64", "product": {"name": "runc-debugsource-4:1.2.9-3.el9_6.x86_64", "product_id": "runc-debugsource-4:1.2.9-3.el9_6.x86_64", "product_identification_helper": {"purl": "pkg:rpm/redhat/runc-debugsource@1.2.9-3.el9_6?arch=x86_64&epoch=4"}}}, {"category": "product_version", "name": "runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "product": {"name": "runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "product_id": "runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "product_identification_helper": {"purl": "pkg:rpm/redhat/runc-debuginfo@1.2.9-3.el9_6?arch=x86_64&epoch=4"}}}], "category": "architecture", "name": "x86_64"}, {"branches": [{"category": "product_version", "name": "runc-4:1.2.9-3.el9_6.s390x", "product": {"name": "runc-4:1.2.9-3.el9_6.s390x", "product_id": "runc-4:1.2.9-3.el9_6.s390x", "product_identification_helper": {"purl": "pkg:rpm/redhat/runc@1.2.9-3.el9_6?arch=s390x&epoch=4"}}}, {"category": "product_version", "name": "runc-debugsource-4:1.2.9-3.el9_6.s390x", "product": {"name": "runc-debugsource-4:1.2.9-3.el9_6.s390x", "product_id": "runc-debugsource-4:1.2.9-3.el9_6.s390x", "product_identification_helper": {"purl": "pkg:rpm/redhat/runc-debugsource@1.2.9-3.el9_6?arch=s390x&epoch=4"}}}, {"category": "product_version", "name": "runc-debuginfo-4:1.2.9-3.el9_6.s390x", "product": {"name": "runc-debuginfo-4:1.2.9-3.el9_6.s390x", "product_id": "runc-debuginfo-4:1.2.9-3.el9_6.s390x", "product_identification_helper": {"purl": "pkg:rpm/redhat/runc-debuginfo@1.2.9-3.el9_6?arch=s390x&epoch=4"}}}], "category": "architecture", "name": "s390x"}], "category": "vendor", "name": "Red Hat"}], "relationships": [{"category": "default_component_of", "full_product_name": {"name": "runc-4:1.2.9-3.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64"}, "product_reference": "runc-4:1.2.9-3.el9_6.aarch64", "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"}, {"category": "default_component_of", "full_product_name": {"name": "runc-4:1.2.9-3.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le"}, "product_reference": "runc-4:1.2.9-3.el9_6.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"}, {"category": "default_component_of", "full_product_name": {"name": "runc-4:1.2.9-3.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x"}, "product_reference": "runc-4:1.2.9-3.el9_6.s390x", "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"}, {"category": "default_component_of", "full_product_name": {"name": "runc-4:1.2.9-3.el9_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src"}, "product_reference": "runc-4:1.2.9-3.el9_6.src", "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"}, {"category": "default_component_of", "full_product_name": {"name": "runc-4:1.2.9-3.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64"}, "product_reference": "runc-4:1.2.9-3.el9_6.x86_64", "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"}, {"category": "default_component_of", "full_product_name": {"name": "runc-debuginfo-4:1.2.9-3.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64"}, "product_reference": "runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"}, {"category": "default_component_of", "full_product_name": {"name": "runc-debuginfo-4:1.2.9-3.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le"}, "product_reference": "runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"}, {"category": "default_component_of", "full_product_name": {"name": "runc-debuginfo-4:1.2.9-3.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x"}, "product_reference": "runc-debuginfo-4:1.2.9-3.el9_6.s390x", "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"}, {"category": "default_component_of", "full_product_name": {"name": "runc-debuginfo-4:1.2.9-3.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64"}, "product_reference": "runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"}, {"category": "default_component_of", "full_product_name": {"name": "runc-debugsource-4:1.2.9-3.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64"}, "product_reference": "runc-debugsource-4:1.2.9-3.el9_6.aarch64", "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"}, {"category": "default_component_of", "full_product_name": {"name": "runc-debugsource-4:1.2.9-3.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le"}, "product_reference": "runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"}, {"category": "default_component_of", "full_product_name": {"name": "runc-debugsource-4:1.2.9-3.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x"}, "product_reference": "runc-debugsource-4:1.2.9-3.el9_6.s390x", "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"}, {"category": "default_component_of", "full_product_name": {"name": "runc-debugsource-4:1.2.9-3.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)", "product_id": "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"}, "product_reference": "runc-debugsource-4:1.2.9-3.el9_6.x86_64", "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"}]}, "vulnerabilities": [{"cve": "CVE-2025-61726", "cwe": {"id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling"}, "discovery_date": "2026-01-28T20:01:42.791305+00:00", "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2434432"}], "notes": [{"category": "description", "text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.", "title": "Vulnerability description"}, {"category": "summary", "text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url", "title": "Vulnerability summary"}, {"category": "other", "text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.", "title": "Statement"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2025-61726"}, {"category": "external", "summary": "RHBZ#2434432", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726", "url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"}, {"category": "external", "summary": "https://go.dev/cl/736712", "url": "https://go.dev/cl/736712"}, {"category": "external", "summary": "https://go.dev/issue/77101", "url": "https://go.dev/issue/77101"}, {"category": "external", "summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc", "url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"}, {"category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-4341", "url": "https://pkg.go.dev/vuln/GO-2026-4341"}], "release_date": "2026-01-28T19:30:31.215000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-20T18:53:07+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9097"}, {"category": "workaround", "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.", "product_ids": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"}, {"cve": "CVE-2025-61729", "cwe": {"id": "CWE-1050", "name": "Excessive Platform Resource Consumption within a Loop"}, "discovery_date": "2025-12-02T20:01:45.330964+00:00", "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2418462"}], "notes": [{"category": "description", "text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.", "title": "Vulnerability description"}, {"category": "summary", "text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2025-61729"}, {"category": "external", "summary": "RHBZ#2418462", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729", "url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"}, {"category": "external", "summary": "https://go.dev/cl/725920", "url": "https://go.dev/cl/725920"}, {"category": "external", "summary": "https://go.dev/issue/76445", "url": "https://go.dev/issue/76445"}, {"category": "external", "summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4", "url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"}, {"category": "external", "summary": "https://pkg.go.dev/vuln/GO-2025-4155", "url": "https://pkg.go.dev/vuln/GO-2025-4155"}], "release_date": "2025-12-02T18:54:10.166000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-20T18:53:07+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9097"}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"}, {"cve": "CVE-2025-68121", "discovery_date": "2026-02-05T18:01:30.086058+00:00", "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2437111"}], "notes": [{"category": "description", "text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.", "title": "Vulnerability description"}, {"category": "summary", "text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption", "title": "Vulnerability summary"}, {"category": "other", "text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.", "title": "Statement"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2025-68121"}, {"category": "external", "summary": "RHBZ#2437111", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121", "url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"}, {"category": "external", "summary": "https://go.dev/cl/737700", "url": "https://go.dev/cl/737700"}, {"category": "external", "summary": "https://go.dev/issue/77217", "url": "https://go.dev/issue/77217"}, {"category": "external", "summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk", "url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"}, {"category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-4337", "url": "https://pkg.go.dev/vuln/GO-2026-4337"}], "release_date": "2026-02-05T17:48:44.141000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-20T18:53:07+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9097"}], "scores": [{"cvss_v3": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "products": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"]}], "threats": [{"category": "impact", "details": "Moderate"}], "title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"}, {"cve": "CVE-2026-25679", "cwe": {"id": "CWE-1286", "name": "Improper Validation of Syntactic Correctness of Input"}, "discovery_date": "2026-03-06T22:02:11.567841+00:00", "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2445356"}], "notes": [{"category": "description", "text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.", "title": "Vulnerability description"}, {"category": "summary", "text": "net/url: Incorrect parsing of IPv6 host literals in net/url", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-25679"}, {"category": "external", "summary": "RHBZ#2445356", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679", "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"}, {"category": "external", "summary": "https://go.dev/cl/752180", "url": "https://go.dev/cl/752180"}, {"category": "external", "summary": "https://go.dev/issue/77578", "url": "https://go.dev/issue/77578"}, {"category": "external", "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk", "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"}, {"category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-4601", "url": "https://pkg.go.dev/vuln/GO-2026-4601"}], "release_date": "2026-03-06T21:28:14.211000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-20T18:53:07+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9097"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.src", "AppStream-9.6.0.Z.EUS:runc-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debuginfo-4:1.2.9-3.el9_6.x86_64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.aarch64", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.ppc64le", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.s390x", "AppStream-9.6.0.Z.EUS:runc-debugsource-4:1.2.9-3.el9_6.x86_64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "net/url: Incorrect parsing of IPv6 host literals in net/url"}], "containers": {"cna": {"x_gcve": [{"recordType": "advisory", "vulnId": "rhsa-2026:9097"}]}}}, {"document": {"aggregate_severity": {"namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important"}, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": {"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": {"label": "WHITE", "url": "https://www.first.org/tlp/"}}, "lang": "en", "notes": [{"category": "summary", "text": "DevWorkspace Operator 0.40.1 has been released.", "title": "Topic"}, {"category": "general", "text": "The DevWorkspace Operator extends OpenShift to provide DevWorkspace support.", "title": "Details"}, {"category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use"}], "publisher": {"category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com"}, "references": [{"category": "self", "summary": "https://access.redhat.com/errata/RHSA-2026:9872", "url": "https://access.redhat.com/errata/RHSA-2026:9872"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-25679", "url": "https://access.redhat.com/security/cve/CVE-2026-25679"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-27137", "url": "https://access.redhat.com/security/cve/CVE-2026-27137"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33186", "url": "https://access.redhat.com/security/cve/CVE-2026-33186"}, {"category": "external", "summary": "https://access.redhat.com/security/updates/classification/", "url": "https://access.redhat.com/security/updates/classification/"}, {"category": "external", "summary": "https://redhat.atlassian.net/browse/CRW-10592", "url": "https://redhat.atlassian.net/browse/CRW-10592"}, {"category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9872.json"}], "title": "Red Hat Security Advisory: DevWorkspace Operator 0.40.1 release.", "tracking": {"current_release_date": "2026-05-19T01:23:56+00:00", "generator": {"date": "2026-05-19T01:23:56+00:00", "engine": {"name": "Red Hat SDEngine", "version": "4.8.0"}}, "id": "RHSA-2026:9872", "initial_release_date": "2026-04-22T21:03:38+00:00", "revision_history": [{"date": "2026-04-22T21:03:38+00:00", "number": "1", "summary": "Initial version"}, {"date": "2026-04-22T21:03:45+00:00", "number": "2", "summary": "Last updated version"}, {"date": "2026-05-19T01:23:56+00:00", "number": "3", "summary": "Last generated version"}], "status": "final", "version": "3"}}, "product_tree": {"branches": [{"branches": [{"branches": [{"category": "product_name", "name": "DevWorkspace Operator 0.4", "product": {"name": "DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4", "product_identification_helper": {"cpe": "cpe:/a:redhat:devworkspace:0.40::el9"}}}], "category": "product_family", "name": "DevWorkspace Operator"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "product": {"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "product_id": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "product_identification_helper": {"purl": "pkg:oci/devworkspace-rhel9-operator@sha256%3A9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04?arch=amd64&repository_url=registry.redhat.io/devworkspace&tag=1776457293"}}}, {"category": "product_version", "name": "registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "product": {"name": "registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "product_id": "registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "product_identification_helper": {"purl": "pkg:oci/devworkspace-operator-bundle@sha256%3A991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca?arch=amd64&repository_url=registry.redhat.io/devworkspace&tag=1776559999"}}}, {"category": "product_version", "name": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "product": {"name": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "product_id": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "product_identification_helper": {"purl": "pkg:oci/devworkspace-project-backup-rhel9@sha256%3A798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6?arch=amd64&repository_url=registry.redhat.io/devworkspace&tag=1776462971"}}}, {"category": "product_version", "name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "product": {"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "product_id": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "product_identification_helper": {"purl": "pkg:oci/devworkspace-project-clone-rhel9@sha256%3A105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750?arch=amd64&repository_url=registry.redhat.io/devworkspace&tag=1776457327"}}}], "category": "architecture", "name": "amd64"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "product": {"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "product_id": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "product_identification_helper": {"purl": "pkg:oci/devworkspace-rhel9-operator@sha256%3A78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca?arch=s390x&repository_url=registry.redhat.io/devworkspace&tag=1776457293"}}}, {"category": "product_version", "name": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "product": {"name": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "product_id": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "product_identification_helper": {"purl": "pkg:oci/devworkspace-project-backup-rhel9@sha256%3A992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962?arch=s390x&repository_url=registry.redhat.io/devworkspace&tag=1776462971"}}}, {"category": "product_version", "name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x", "product": {"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x", "product_id": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x", "product_identification_helper": {"purl": "pkg:oci/devworkspace-project-clone-rhel9@sha256%3Ae14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34?arch=s390x&repository_url=registry.redhat.io/devworkspace&tag=1776457327"}}}], "category": "architecture", "name": "s390x"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "product": {"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "product_id": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "product_identification_helper": {"purl": "pkg:oci/devworkspace-rhel9-operator@sha256%3A7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8?arch=ppc64le&repository_url=registry.redhat.io/devworkspace&tag=1776457293"}}}, {"category": "product_version", "name": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "product": {"name": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "product_id": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "product_identification_helper": {"purl": "pkg:oci/devworkspace-project-backup-rhel9@sha256%3A0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b?arch=ppc64le&repository_url=registry.redhat.io/devworkspace&tag=1776462971"}}}, {"category": "product_version", "name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "product": {"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "product_id": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "product_identification_helper": {"purl": "pkg:oci/devworkspace-project-clone-rhel9@sha256%3A03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d?arch=ppc64le&repository_url=registry.redhat.io/devworkspace&tag=1776457327"}}}], "category": "architecture", "name": "ppc64le"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64", "product": {"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64", "product_id": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64", "product_identification_helper": {"purl": "pkg:oci/devworkspace-rhel9-operator@sha256%3Aa55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2?arch=arm64&repository_url=registry.redhat.io/devworkspace&tag=1776457293"}}}, {"category": "product_version", "name": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "product": {"name": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "product_id": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "product_identification_helper": {"purl": "pkg:oci/devworkspace-project-backup-rhel9@sha256%3A9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09?arch=arm64&repository_url=registry.redhat.io/devworkspace&tag=1776462971"}}}, {"category": "product_version", "name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "product": {"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "product_id": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "product_identification_helper": {"purl": "pkg:oci/devworkspace-project-clone-rhel9@sha256%3A053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596?arch=arm64&repository_url=registry.redhat.io/devworkspace&tag=1776457327"}}}], "category": "architecture", "name": "arm64"}], "category": "vendor", "name": "Red Hat"}], "relationships": [{"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64 as a component of DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64"}, "product_reference": "registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "relates_to_product_reference": "DevWorkspace Operator 0.4"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le as a component of DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le"}, "product_reference": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "relates_to_product_reference": "DevWorkspace Operator 0.4"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64 as a component of DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64"}, "product_reference": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "relates_to_product_reference": "DevWorkspace Operator 0.4"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x as a component of DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x"}, "product_reference": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "relates_to_product_reference": "DevWorkspace Operator 0.4"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64 as a component of DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64"}, "product_reference": "registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "relates_to_product_reference": "DevWorkspace Operator 0.4"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le as a component of DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le"}, "product_reference": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "relates_to_product_reference": "DevWorkspace Operator 0.4"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64 as a component of DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64"}, "product_reference": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "relates_to_product_reference": "DevWorkspace Operator 0.4"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64 as a component of DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64"}, "product_reference": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "relates_to_product_reference": "DevWorkspace Operator 0.4"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x as a component of DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x"}, "product_reference": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x", "relates_to_product_reference": "DevWorkspace Operator 0.4"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le as a component of DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le"}, "product_reference": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "relates_to_product_reference": "DevWorkspace Operator 0.4"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x as a component of DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x"}, "product_reference": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "relates_to_product_reference": "DevWorkspace Operator 0.4"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64 as a component of DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64"}, "product_reference": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "relates_to_product_reference": "DevWorkspace Operator 0.4"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64 as a component of DevWorkspace Operator 0.4", "product_id": "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64"}, "product_reference": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64", "relates_to_product_reference": "DevWorkspace Operator 0.4"}]}, "vulnerabilities": [{"cve": "CVE-2026-25679", "cwe": {"id": "CWE-1286", "name": "Improper Validation of Syntactic Correctness of Input"}, "discovery_date": "2026-03-06T22:02:11.567841+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2445356"}], "notes": [{"category": "description", "text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.", "title": "Vulnerability description"}, {"category": "summary", "text": "net/url: Incorrect parsing of IPv6 host literals in net/url", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64"], "known_not_affected": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-25679"}, {"category": "external", "summary": "RHBZ#2445356", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679", "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"}, {"category": "external", "summary": "https://go.dev/cl/752180", "url": "https://go.dev/cl/752180"}, {"category": "external", "summary": "https://go.dev/issue/77578", "url": "https://go.dev/issue/77578"}, {"category": "external", "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk", "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"}, {"category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-4601", "url": "https://pkg.go.dev/vuln/GO-2026-4601"}], "release_date": "2026-03-06T21:28:14.211000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-22T21:03:38+00:00", "details": "To start using the DevWorkspace Operator, install the DevWorkspace Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.", "product_ids": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9872"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "net/url: Incorrect parsing of IPv6 host literals in net/url"}, {"cve": "CVE-2026-27137", "cwe": {"id": "CWE-295", "name": "Improper Certificate Validation"}, "discovery_date": "2026-03-06T22:01:38.859733+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2445345"}], "notes": [{"category": "description", "text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.", "title": "Vulnerability description"}, {"category": "summary", "text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64"], "known_not_affected": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-27137"}, {"category": "external", "summary": "RHBZ#2445345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"}, {"category": "external", "summary": "https://go.dev/cl/752182", "url": "https://go.dev/cl/752182"}, {"category": "external", "summary": "https://go.dev/issue/77952", "url": "https://go.dev/issue/77952"}, {"category": "external", "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk", "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"}, {"category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-4599", "url": "https://pkg.go.dev/vuln/GO-2026-4599"}], "release_date": "2026-03-06T21:28:13.748000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-22T21:03:38+00:00", "details": "To start using the DevWorkspace Operator, install the DevWorkspace Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.", "product_ids": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9872"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"}, {"cve": "CVE-2026-33186", "cwe": {"id": "CWE-551", "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"}, "discovery_date": "2026-03-20T23:02:27.802640+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2449833"}], "notes": [{"category": "description", "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.", "title": "Vulnerability description"}, {"category": "summary", "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64"], "known_not_affected": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-33186"}, {"category": "external", "summary": "RHBZ#2449833", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"}, {"category": "external", "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3", "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"}], "release_date": "2026-03-20T22:23:32.147000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-22T21:03:38+00:00", "details": "To start using the DevWorkspace Operator, install the DevWorkspace Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.", "product_ids": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9872"}, {"category": "workaround", "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.", "product_ids": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "products": ["DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:991f3f31d41dc78e4aede374e9d6eaf82016da4528c3481af9936b4ab5ed30ca_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:0131e2bce3611a145b67ead5e4e0c0bb4206a996211510daffe7f0eeef42992b_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:798b5bfebc9c5423a116c80732fa5e1dd01dc0b99795387bc81b95c98ffc42a6_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:992b3afbd4630383951536fad36590328f5f4dd1ac438b24860e307bb21f6962_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-backup-rhel9@sha256:9fe2f1443f73cc296a9f50aba782c5b6aabae4a2adbba754f4346a395bd8bc09_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:053d1f1ba2f47f45379e4630d3cdcb734915e538f2500477108e2fb9f28b0596_arm64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:105988d31561736be604af59fa46b7b73003609546cf9b8bf5af97112c4dc750_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e14baa9938a2ce79f2f977e70c6a706620e7eb652191269b628f6164f4120f34_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:7033e308ba08300838ce7b507434d3e2bed97e0b8919409079b5c9705cbf06e8_ppc64le", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:78b5652108b78dc1b8b3e5bd10026ec02954c41a73c59857ef8a75b2a59d3eca_s390x", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:9b0eea627cc3a2531a517df168818f40c92ebbf0a22ab56a22396600a2e59d04_amd64", "DevWorkspace Operator 0.4:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:a55f5c74e35c5fe7dbab7b6e1cd6ea824606ed8d198e903dad264baab40008e2_arm64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"}], "containers": {"cna": {"x_gcve": [{"recordType": "advisory", "vulnId": "rhsa-2026:9872"}]}}}, {"document": {"aggregate_severity": {"namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important"}, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": {"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": {"label": "WHITE", "url": "https://www.first.org/tlp/"}}, "lang": "en", "notes": [{"category": "summary", "text": "The multicluster engine for Kubernetes 2.6 General Availability release images,\nwhich add new features and enhancements, bug fixes, and updated container images.", "title": "Topic"}, {"category": "general", "text": "The multicluster engine for Kubernetes v2.6 images\n\nThe multicluster engine for Kubernetes provides the foundational components\nthat are necessary for the centralized management of multiple\nKubernetes-based clusters across data centers, public clouds, and private\nclouds.\n\nYou can use the engine to create new Red Hat OpenShift Container Platform\nclusters or to bring existing Kubernetes-based clusters under management by\nimporting them. After the clusters are managed, you can use the APIs that\nare provided by the engine to distribute configuration based on placement\npolicy.", "title": "Details"}, {"category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use"}], "publisher": {"category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com"}, "references": [{"category": "self", "summary": "https://access.redhat.com/errata/RHSA-2026:9848", "url": "https://access.redhat.com/errata/RHSA-2026:9848"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-13465", "url": "https://access.redhat.com/security/cve/CVE-2025-13465"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-61726", "url": "https://access.redhat.com/security/cve/CVE-2025-61726"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-61729", "url": "https://access.redhat.com/security/cve/CVE-2025-61729"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-68121", "url": "https://access.redhat.com/security/cve/CVE-2025-68121"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-22029", "url": "https://access.redhat.com/security/cve/CVE-2026-22029"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-25639", "url": "https://access.redhat.com/security/cve/CVE-2026-25639"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-29063", "url": "https://access.redhat.com/security/cve/CVE-2026-29063"}, {"category": "external", "summary": "https://access.redhat.com/security/updates/classification/", "url": "https://access.redhat.com/security/updates/classification/"}, {"category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9848.json"}], "title": "Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.10 security update", "tracking": {"current_release_date": "2026-05-19T01:23:56+00:00", "generator": {"date": "2026-05-19T01:23:56+00:00", "engine": {"name": "Red Hat SDEngine", "version": "4.8.0"}}, "id": "RHSA-2026:9848", "initial_release_date": "2026-04-22T17:54:30+00:00", "revision_history": [{"date": "2026-04-22T17:54:30+00:00", "number": "1", "summary": "Initial version"}, {"date": "2026-04-22T17:54:41+00:00", "number": "2", "summary": "Last updated version"}, {"date": "2026-05-19T01:23:56+00:00", "number": "3", "summary": "Last generated version"}], "status": "final", "version": "3"}}, "product_tree": {"branches": [{"branches": [{"branches": [{"category": "product_name", "name": "multicluster engine for Kubernetes 2.6", "product": {"name": "multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6", "product_identification_helper": {"cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9"}}}], "category": "product_family", "name": "multicluster engine for Kubernetes"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "product_identification_helper": {"purl": "pkg:oci/addon-manager-rhel9@sha256%3A407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775977126"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "product_identification_helper": {"purl": "pkg:oci/must-gather-rhel9@sha256%3A222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1776434265"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "product_identification_helper": {"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775678862"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "product_identification_helper": {"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1776038312"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "product_identification_helper": {"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1776382931"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "product_identification_helper": {"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1776210187"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "product_identification_helper": {"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Af0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775826440"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "product_identification_helper": {"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1776382976"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "product_identification_helper": {"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Ae7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1776382929"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "product_identification_helper": {"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Ada99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1776296503"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "product_identification_helper": {"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775864344"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "product_identification_helper": {"purl": "pkg:oci/console-mce-rhel9@sha256%3A394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1776223790"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "product_identification_helper": {"purl": "pkg:oci/discovery-rhel9@sha256%3A9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1776103237"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "product_identification_helper": {"purl": "pkg:oci/hive-rhel9@sha256%3Aedc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1776286716"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "product_identification_helper": {"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3Abcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775691813"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "product_identification_helper": {"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Ab9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775950593"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "product_identification_helper": {"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775950592"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "product_identification_helper": {"purl": "pkg:oci/image-based-install-rhel9@sha256%3A0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1776469416"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "product_identification_helper": {"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Adf9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775736638"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "product_identification_helper": {"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775691793"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "product_identification_helper": {"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Ac67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1776296534"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "product_identification_helper": {"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775778326"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "product_identification_helper": {"purl": "pkg:oci/placement-rhel9@sha256%3A8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775977212"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "product_identification_helper": {"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1776296540"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "product_identification_helper": {"purl": "pkg:oci/registration-rhel9@sha256%3Acd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775977180"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "product_identification_helper": {"purl": "pkg:oci/registration-operator-rhel9@sha256%3A65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775977181"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64", "product": {"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64", "product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64", "product_identification_helper": {"purl": "pkg:oci/work-rhel9@sha256%3Ab6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3?arch=amd64&repository_url=registry.redhat.io/multicluster-engine&tag=1775977184"}}}], "category": "architecture", "name": "amd64"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "product_identification_helper": {"purl": "pkg:oci/addon-manager-rhel9@sha256%3A437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775977126"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "product_identification_helper": {"purl": "pkg:oci/must-gather-rhel9@sha256%3A071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1776434265"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "product_identification_helper": {"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775678862"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "product_identification_helper": {"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1776038312"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "product_identification_helper": {"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3Af856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1776382931"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "product_identification_helper": {"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1776210187"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "product_identification_helper": {"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Ab41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775826440"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "product_identification_helper": {"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3Ac6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1776382976"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "product_identification_helper": {"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Ac3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1776382929"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "product_identification_helper": {"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1776296503"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "product_identification_helper": {"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775864344"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "product_identification_helper": {"purl": "pkg:oci/console-mce-rhel9@sha256%3Aba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1776223790"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "product_identification_helper": {"purl": "pkg:oci/discovery-rhel9@sha256%3Aecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1776103237"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "product_identification_helper": {"purl": "pkg:oci/hive-rhel9@sha256%3Aa1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1776286716"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "product_identification_helper": {"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3Ad55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775691813"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "product_identification_helper": {"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Ab6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775950593"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "product_identification_helper": {"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3Aaaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775950592"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "product_identification_helper": {"purl": "pkg:oci/image-based-install-rhel9@sha256%3Abb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1776469416"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "product_identification_helper": {"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Af88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775736638"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "product_identification_helper": {"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775691793"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "product_identification_helper": {"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Af076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1776296534"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "product_identification_helper": {"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775778326"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "product_identification_helper": {"purl": "pkg:oci/placement-rhel9@sha256%3A0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775977212"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "product_identification_helper": {"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Acb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1776296540"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "product_identification_helper": {"purl": "pkg:oci/registration-rhel9@sha256%3Ae84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775977180"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "product_identification_helper": {"purl": "pkg:oci/registration-operator-rhel9@sha256%3A2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775977181"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "product": {"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "product_identification_helper": {"purl": "pkg:oci/work-rhel9@sha256%3A2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d?arch=arm64&repository_url=registry.redhat.io/multicluster-engine&tag=1775977184"}}}], "category": "architecture", "name": "arm64"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "product_identification_helper": {"purl": "pkg:oci/addon-manager-rhel9@sha256%3Af82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775977126"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "product_identification_helper": {"purl": "pkg:oci/must-gather-rhel9@sha256%3A76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1776434265"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "product_identification_helper": {"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775678862"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "product_identification_helper": {"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Ac17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1776038312"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "product_identification_helper": {"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1776382931"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "product_identification_helper": {"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1776210187"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "product_identification_helper": {"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Ab5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775826440"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "product_identification_helper": {"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3Ad26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1776382976"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "product_identification_helper": {"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Af33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1776382929"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "product_identification_helper": {"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Ac7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1776296503"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "product_identification_helper": {"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775864344"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "product_identification_helper": {"purl": "pkg:oci/console-mce-rhel9@sha256%3A32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1776223790"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "product_identification_helper": {"purl": "pkg:oci/discovery-rhel9@sha256%3A4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1776103237"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "product_identification_helper": {"purl": "pkg:oci/hive-rhel9@sha256%3A2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1776286716"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "product_identification_helper": {"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3Ae006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775691813"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "product_identification_helper": {"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775950593"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "product_identification_helper": {"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775950592"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "product_identification_helper": {"purl": "pkg:oci/image-based-install-rhel9@sha256%3A07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1776469416"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "product_identification_helper": {"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Aed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775736638"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "product_identification_helper": {"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Acd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775691793"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "product_identification_helper": {"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1776296534"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "product_identification_helper": {"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3Ae32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775778326"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "product_identification_helper": {"purl": "pkg:oci/placement-rhel9@sha256%3A969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775977212"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "product_identification_helper": {"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1776296540"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "product_identification_helper": {"purl": "pkg:oci/registration-rhel9@sha256%3A3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775977180"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "product_identification_helper": {"purl": "pkg:oci/registration-operator-rhel9@sha256%3A9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775977181"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "product": {"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "product_identification_helper": {"purl": "pkg:oci/work-rhel9@sha256%3A068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655?arch=ppc64le&repository_url=registry.redhat.io/multicluster-engine&tag=1775977184"}}}], "category": "architecture", "name": "ppc64le"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "product_identification_helper": {"purl": "pkg:oci/addon-manager-rhel9@sha256%3A865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775977126"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "product_identification_helper": {"purl": "pkg:oci/must-gather-rhel9@sha256%3Aa7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1776434265"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "product_identification_helper": {"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Aed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775678862"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "product_identification_helper": {"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Ae05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1776038312"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "product_identification_helper": {"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3Aabdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1776382931"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "product_identification_helper": {"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1776210187"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "product_identification_helper": {"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775826440"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "product_identification_helper": {"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3Ae246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1776382976"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "product_identification_helper": {"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Adeacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1776382929"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "product_identification_helper": {"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1776296503"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "product_identification_helper": {"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775864344"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "product_identification_helper": {"purl": "pkg:oci/console-mce-rhel9@sha256%3Ad564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1776223790"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "product_identification_helper": {"purl": "pkg:oci/discovery-rhel9@sha256%3A27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1776103237"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "product_identification_helper": {"purl": "pkg:oci/hive-rhel9@sha256%3A1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1776286716"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "product_identification_helper": {"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775691813"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "product_identification_helper": {"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775950593"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "product_identification_helper": {"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775950592"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "product_identification_helper": {"purl": "pkg:oci/image-based-install-rhel9@sha256%3A79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1776469416"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "product_identification_helper": {"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Afb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775736638"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "product_identification_helper": {"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775691793"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "product_identification_helper": {"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1776296534"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "product_identification_helper": {"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775778326"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "product_identification_helper": {"purl": "pkg:oci/placement-rhel9@sha256%3A54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775977212"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "product_identification_helper": {"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Acc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1776296540"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "product_identification_helper": {"purl": "pkg:oci/registration-rhel9@sha256%3Ad1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775977180"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "product_identification_helper": {"purl": "pkg:oci/registration-operator-rhel9@sha256%3A9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775977181"}}}, {"category": "product_version", "name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "product": {"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "product_identification_helper": {"purl": "pkg:oci/work-rhel9@sha256%3A817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78?arch=s390x&repository_url=registry.redhat.io/multicluster-engine&tag=1775977184"}}}], "category": "architecture", "name": "s390x"}], "category": "vendor", "name": "Red Hat"}], "relationships": [{"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le"}, "product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64"}, "product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x"}, "product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64 as a component of multicluster engine for Kubernetes 2.6", "product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"}, "product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64", "relates_to_product_reference": "multicluster engine for Kubernetes 2.6"}]}, "vulnerabilities": [{"cve": "CVE-2025-13465", "cwe": {"id": "CWE-1321", "name": "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')"}, "discovery_date": "2026-01-21T20:01:28.774829+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2431740"}], "notes": [{"category": "description", "text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.", "title": "Vulnerability description"}, {"category": "summary", "text": "lodash: prototype pollution in _.unset and _.omit functions", "title": "Vulnerability summary"}, {"category": "other", "text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.", "title": "Statement"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x"], "known_not_affected": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2025-13465"}, {"category": "external", "summary": "RHBZ#2431740", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465", "url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"}, {"category": "external", "summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg", "url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"}], "release_date": "2026-01-21T19:05:28.846000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-22T17:54:30+00:00", "details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9848"}, {"category": "workaround", "details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1"}, "products": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "lodash: prototype pollution in _.unset and _.omit functions"}, {"cve": "CVE-2025-61726", "cwe": {"id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling"}, "discovery_date": "2026-01-28T20:01:42.791305+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2434432"}], "notes": [{"category": "description", "text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.", "title": "Vulnerability description"}, {"category": "summary", "text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url", "title": "Vulnerability summary"}, {"category": "other", "text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.", "title": "Statement"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64"], "known_not_affected": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2025-61726"}, {"category": "external", "summary": "RHBZ#2434432", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726", "url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"}, {"category": "external", "summary": "https://go.dev/cl/736712", "url": "https://go.dev/cl/736712"}, {"category": "external", "summary": "https://go.dev/issue/77101", "url": "https://go.dev/issue/77101"}, {"category": "external", "summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc", "url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"}, {"category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-4341", "url": "https://pkg.go.dev/vuln/GO-2026-4341"}], "release_date": "2026-01-28T19:30:31.215000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-22T17:54:30+00:00", "details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9848"}, {"category": "workaround", "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"}, {"cve": "CVE-2025-61729", "cwe": {"id": "CWE-1050", "name": "Excessive Platform Resource Consumption within a Loop"}, "discovery_date": "2025-12-02T20:01:45.330964+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2418462"}], "notes": [{"category": "description", "text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.", "title": "Vulnerability description"}, {"category": "summary", "text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64"], "known_not_affected": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2025-61729"}, {"category": "external", "summary": "RHBZ#2418462", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729", "url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"}, {"category": "external", "summary": "https://go.dev/cl/725920", "url": "https://go.dev/cl/725920"}, {"category": "external", "summary": "https://go.dev/issue/76445", "url": "https://go.dev/issue/76445"}, {"category": "external", "summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4", "url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"}, {"category": "external", "summary": "https://pkg.go.dev/vuln/GO-2025-4155", "url": "https://pkg.go.dev/vuln/GO-2025-4155"}], "release_date": "2025-12-02T18:54:10.166000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-22T17:54:30+00:00", "details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9848"}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"}, {"cve": "CVE-2025-68121", "discovery_date": "2026-02-05T18:01:30.086058+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2437111"}], "notes": [{"category": "description", "text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.", "title": "Vulnerability description"}, {"category": "summary", "text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption", "title": "Vulnerability summary"}, {"category": "other", "text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.", "title": "Statement"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64"], "known_not_affected": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2025-68121"}, {"category": "external", "summary": "RHBZ#2437111", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121", "url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"}, {"category": "external", "summary": "https://go.dev/cl/737700", "url": "https://go.dev/cl/737700"}, {"category": "external", "summary": "https://go.dev/issue/77217", "url": "https://go.dev/issue/77217"}, {"category": "external", "summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk", "url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"}, {"category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-4337", "url": "https://pkg.go.dev/vuln/GO-2026-4337"}], "release_date": "2026-02-05T17:48:44.141000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-22T17:54:30+00:00", "details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9848"}], "scores": [{"cvss_v3": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "products": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "threats": [{"category": "impact", "details": "Moderate"}], "title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"}, {"cve": "CVE-2026-22029", "cwe": {"id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}, "discovery_date": "2026-01-10T04:01:03.694749+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2428412"}], "notes": [{"category": "description", "text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.", "title": "Vulnerability description"}, {"category": "summary", "text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x"], "known_not_affected": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-22029"}, {"category": "external", "summary": "RHBZ#2428412", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029", "url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"}, {"category": "external", "summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx", "url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"}], "release_date": "2026-01-10T02:42:32.736000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-22T17:54:30+00:00", "details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9848"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", "version": "3.1"}, "products": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"}, {"cve": "CVE-2026-25639", "cwe": {"id": "CWE-1287", "name": "Improper Validation of Specified Type of Input"}, "discovery_date": "2026-02-09T21:00:49.280114+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2438237"}], "notes": [{"category": "description", "text": "A denial of service flaw has been discovered in the Axios npm package. the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service.", "title": "Vulnerability description"}, {"category": "summary", "text": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x"], "known_not_affected": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-25639"}, {"category": "external", "summary": "RHBZ#2438237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2438237"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25639", "url": "https://www.cve.org/CVERecord?id=CVE-2026-25639"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25639", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25639"}, {"category": "external", "summary": "https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57", "url": "https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57"}, {"category": "external", "summary": "https://github.com/axios/axios/releases/tag/v1.13.5", "url": "https://github.com/axios/axios/releases/tag/v1.13.5"}, {"category": "external", "summary": "https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433", "url": "https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433"}], "release_date": "2026-02-09T20:11:22.374000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-22T17:54:30+00:00", "details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9848"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig"}, {"cve": "CVE-2026-29063", "cwe": {"id": "CWE-915", "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"}, "discovery_date": "2026-03-06T19:00:57.982727+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2445291"}], "notes": [{"category": "description", "text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).", "title": "Vulnerability description"}, {"category": "summary", "text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution", "title": "Vulnerability summary"}, {"category": "other", "text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.", "title": "Statement"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x"], "known_not_affected": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-29063"}, {"category": "external", "summary": "RHBZ#2445291", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063", "url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"}, {"category": "external", "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3", "url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"}, {"category": "external", "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8", "url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"}, {"category": "external", "summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5", "url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"}, {"category": "external", "summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw", "url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"}], "release_date": "2026-03-06T18:25:22.438000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-22T17:54:30+00:00", "details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro", "product_ids": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9848"}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "products": ["multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:407afc190324598e778fc09d218da552a2430612bad6b50ff9f6bc824b788dfc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:437c27590382282a29dd543a69bbaed7ebd5421f73b98311c13f9e37c9ff553e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:865fcb2f6796be98004ad84f0fffcd7200690f56ccccf5a39af4c5888abb213e_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f82ac0d043682cc16fb832d9027464ee65f314d70ce98687f45db50e16d2b250_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:0768996d28693025a487c86c72debf1fda095282412b2c33ca0f21d8d9011b8a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5e84dda66a7735bbae425ac1a6b0e241662edb858476eb82adf72b7dff4b3916_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9f13c6203d4ba9cde9bd8932b7e86c4a9c3396bb82235601b84f6743fb1b675f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ed05bbaa85197e21425ed8f503f74c6717bb6f2112e9b57c9b115071777c1995_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2ec4baacabb144497ea62482a3c0ccafb9c3794c5c89f9aebbe855d7d9829dbe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:72e64e8d1be38857af7beadc81e2f5f071f636b1d9233a70add5a1f18833ec45_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c17a0ffd9c9546016a87cdd75adbaaa742f8637a0d81975d7b76662ffe5b069d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:e05c6ff6a481e7956a58e07f10dc15470ef2af82966b2159260077bd6ba06cf7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4bef3dab9db981249b3a1b3a556e615226b29fdc7a6593a3970921799817129f_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:901dd1ad148b84d3c1bcfa71beeaf75b836bb382bf99893f65d4629d006bcfc7_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:abdca0cc6776dba16be873853e38bc62bb9d3f1eb80f1d4bcbe7829714a019b5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:f856447bc82e37dc4da78639ff08bc1f4b4c4e0d75c3d1eeec81e3807c65ad7e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:345d589cb55ccb8afb080f04054ebc30f0cf6383742ce750f4f5656e14f4db35_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5557594c1ac0b047fea659868fdf71b8f16e0548abe8f41bf58ce80924701a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8e08974a6dc10be9cb7d7a07527e8960cd93b76506355ce900e2e691208d1047_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9d501eb84c2b7f9f860c5bb08d9adcc599e42ed0c3a0e24af3c32b686f005182_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8690fcbd38eeec0cde0edc5c2e46683837d6247ce657c495fc791a0bb13c0450_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b41036dc59ecfd530609349da9b73dec177184662aaf69bac35e67d245815d2a_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5a7706fc69c7e1b3ad3ff03c5b0e46b44cd93ce332a74acd43da8c86b6b7163_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f0f363dc51f50bf822bff6b5f9072299c2404d8df1891243ae3ad6ba90c95f0a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:212c9c73fd1050e3f202703e7c5c5a466d1931d918e3f730d2c56bb2629337e2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c6b10fd7009685d032e8c914cce4a1b2630ab99f2262fddd6dd32c048224e535_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d26e9fe1bf09eb1c025e28c795debabe0dda6a3f0fa112a6507b8862489de361_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e246eb1fb572fe7ad7058afd783020e77dd61699a5ffd290000e80baa6bc0454_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c3754441d1af76c226983b48c57b537856da6cc21272008c05dfbb8e860d25f6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:deacb2138fe3d8a8d9ddebbbc257b4ea5be376c26df0e46a276c631752ca8a16_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e7f321893f0f76fcf0e83225502e1367752c24c449a44810ccbed08ee3af3efb_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f33966f40e46d3815d0a8859b4fa802e48931ba8f95957c31c9d728f6ae42340_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4b4a1fda57434c75499094003457759ec6d530ec8fcfc08c8e0c86fb6f33c68f_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:93eb3a376b3d3a878d104d8af966b8deaed7b26ceaf16bf337d70687e0e5fa17_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:c7f96198522ecf44c19fe190d603d94387b3a522e3210826c6c08c0999aabc56_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:da99e0676f28200a08e4996adb0d107713fd11f747df5abb8b58fbc95bcab827_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:43f0b3b75610ab9d19d261854e390dc01bf64777cce43a1076375b1580452908_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:583bf219ded8c4f21a696daa081720f3eb81c3676e0182fd246e6d4f1d3fb2f7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:76a5e7db276463588b6a98c27fb8a24a8f85b73eef2fd4742b72690fa92decc3_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8efc263d78912f66ee98a3717a8cefdeb6e6b87bd8f3788d4f3712d9000d031c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:32a81668f5cac70ec36ffc3caa97a4239d1840004afc8df2418e79bbbbf7c88d_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:394ac878a493ffd61692942614165e69acbdaaa37b1f9a460996dc52d8586b82_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:ba480c9b472e0746645bcebdd6ed5559b611d410d521637a9e7092ee925af91d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d564b6f6d156280a08c0f3585673a11c4a72acc74626b5780bb39b7141170a19_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:27bb82aa0a0d0506fa45908892e379e4bf8190ee9512483c7d7b6a001eb37c09_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4e8e3b7a8a317dda2ec47a53110467177015d9cec39ee64b819a133048ee06f2_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:9df56b21394d9b17bf70d49a367c004c4f76111bbcd0ae2046871631a914a5a4_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:ecc19a7bbdce3c0328fff1da64ae4f3959c9d0a67400cea11744bc5d336853ee_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:1f68b9c88d343654c87334fbc3b5c42338406b727da3c6bbf3b14fbef236b93a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:2eb31f9a7694f4b8690e168c0d8fcd0da42642ca87508e5199e4310fc56ea232_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a1a514fcf09eda92d948a4375a599fcd45189a36a8748a2cf499a0fd12a7cb52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:edc942a663b791725f358fcef40fe2de8ad55f8f81d7ac2ff239ccefbb24ea3c_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:221cce833cfe679a7ed2674f39ed6aae065939119702188811507cf7b672996c_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:bcb17131e9d74ac42ddcb1baf13c2697a72c07dd386b871032c34144be5d9647_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d55c640d3df3705e8a861e7034f450d1c7bb5726251ba0384fd28b40bb178595_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:e006a8a7d0dc166885ba2a5f573128938ee6d56c882a71b68845b97e483d6e32_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5c4384e6f2589dedfbb0942b40187a93581b07a724ec2a84189af4f617e9416b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:5f68fd93ae28391c01fe0a44829f12494544b59c330a2902a6edaad45c7b02b3_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b6f4af9508e1a5a312c274aa19fa280970d462e16857394d843c53358ee318c2_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b9d178326c5f78df593cad595dd3b8a1329187d9f8d021201df726206b70bc49_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:2d23f9d25ffe94fbb9e794a61690cf08ac2888b053efc194c9abdcdeaea8fee5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3fbf4c46f032eb961dc7f519f38cd93e49839ac94761e6f43de0e648d75c241a_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4196cd9623f2102f364c0662c6c6092efb19b2dba7bb60d0b156a12dccef9949_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aaade5f90a49e8b49ccb8cc1fd74485ba78a37cab222676e2495500e95a911e6_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07eaddc3666472876e1470d7d5bc49f28bce4176efbed07214d1284a785bc1de_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0afadb8cc20a5a4a55a9762159ccd08de9c79abd5cd915f620eaedcae97e1dda_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:79cb2e32b2711d9986e53977c8757b2564ae3dc2cb82076adae43aeb61bc1499_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bb24ce270fa3812316ec61cc7b5bf138ed54608e326d5ee783e040ca04b30c6e_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:df9600893f99f149e15fb4a0295ed978d0cc35141a67a3a9824d339a5e13e08f_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ed9963c1c0f2535aa753ecf341ab45890c838c49719b189fa1149ce5a36f244c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f88156d91c826636ffbff092da3733a06f49f210d3f45c20b3d145b8033d3a14_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:fb23549a45050af95855906f65732389237ed6e907974600ee5f02fda696c7a7_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:08236bbe9754e0d9e8e11c1486fe81134ed8cb392f8157a9267e22823662fe83_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3ef0376735304b9a8d46648aacc84adffbe3424d2ad790cbfd3a10888d60b54d_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6ae974b35acc19fad0a42f0452bdb13d4d736ed59e3c9ce1ff448456f8f8cf3b_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cd44c903b5ce3fc9f9c93be883f2a5c6106d1d86ad5a3596f8cb1ccb8ddc316c_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:48408e0a5ec56b32fb9cfddf696c91b3fa1890679643959f3b12ddf746ddfe40_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6ebdb26020f475f5a9066777ea8aeb0bc6a99f93db9a7e6d1e0a6272528ce8e7_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c67a2dc59ec90f77f8de8e72d4130f181e0ced37aba0a2b71d438e9221fd53fe_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:f076915d0170bd2a3ae4552c9a2199dcab7016f0fe4f9e6d027a474a81dffa44_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:08b253bbac766546380de11c4eb330ab1da4cf45bace66296d6ce71a46052ccc_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:3ed63b7040f9f2e43f3034c0b1ecd3479b6fb1e9cb45f34b65c6ba2cc0fdc6e1_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:491acfe31e1ded0bd8b5e6d4ce5115a5e1ef4b0ea5165635abcb21055a3c9f41_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:e32f3082cbed11fd6e5f1f65b58d9e2ab52df3298ecc63ce32dea78fdf36150e_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:071caf0cee1f904aaf5747b5c894f8e68e273c76b045e2e46f3fdc747fde0b52_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:222fb4df168138dfe036cba15b0592b8d85aeb0a3907cbbcb80caa148ebd5e75_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:76e5532fdd70e237898a03f7ab0304d44684ac4d78930c04140558b780e44284_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a7d81f1ca5781bad0fdf032192994d7aebb438b67370526b7aaf24de26ea2a4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:0389924d0daecd14270a2c80cf761400b2683b5d1f191ac63e09eddc33b6f459_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:54ec16d78dafc319cdd51ef6c7328ec9b6ad7fdf9cac5e4e47c1f510ad2a132a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:8c81477e75d355483f39b88ddfdd30b8ea6982a45aeb3cdc178b53f6e9198334_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:969cc2b05bb0fe1b00cfa728b6b0a741bf21e81aecae04aba1e0bbdd1921faa5_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:55abc89b8554cc3e314cf9f7f998101a931c3cf9b3b21e0f0cdbe26d5aba1be6_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:855c5cd1036f4a3c38f35f6d781e3f31941c91d61b699f4b714cda909b81bf70_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cb3f786b682cc31995858194dec9dfdc1ac43f6a0ceb609364bbc07c732895e9_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:cc8fc81d0fb612703581e0df2f9b4262aae0d1f1af29a5facdf9dac567b95510_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2b24bab2c9db586e3de204607f606c1577ab35ef78ce9cb154b08d56a3cb70d3_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:65ee7dbee80ad40347972f9a42cb18cde25554211afbb6f0e2c1aca3405e11f2_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9ce62c421421c1c2739b1e79f010539134123583ebaef7274549ba49e1c0010a_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9e7310305572d3bcbfca6bff55daa43a01039cc6384149b573c696335048e5a5_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3764ca1ef9ed913896c0449b271706748517cf96e67d88ad491e225fcb0eb549_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:cd74d39b219e499f077516f6c229cddff21cd480d4ef33033d644bdbfb0b3682_amd64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d1b6093f101ae7e4956aad52d4de99c68472f86de3094c98fc4f290926a99f4a_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e84d9e60025112bcc466c1ab0c8b82dccafc34b85266f5650ff6c4fbdd9ad6c5_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:068f2fd00a2709d041c1eb2aab64ac4741a7a4b27475a722571a450ab496b655_ppc64le", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:2c8f4c88f1ac9cd64359e990530e27ad8c3ff590e17aca5a072ef0ec674f380d_arm64", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:817d332d90af406985a0611de4a171f7478d39f0afa1a6aafb7cf5eb7616ca78_s390x", "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/work-rhel9@sha256:b6b5e9e343849e851770dcdbf287b63de1a0cb8cec21cee9be2ef4fdcca445e3_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"}], "containers": {"cna": {"x_gcve": [{"recordType": "advisory", "vulnId": "rhsa-2026:9848"}]}}}, {"document": {"aggregate_severity": {"namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important"}, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": {"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": {"label": "WHITE", "url": "https://www.first.org/tlp/"}}, "lang": "en", "notes": [{"category": "summary", "text": "Red Hat OpenShift Service Mesh 3.2.4\n\nThis update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic"}, {"category": "general", "text": "Red Hat OpenShift Service Mesh 3.2.4, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.\n\nFixes/Improvements:\n\nSecurity Fix(es):\n\n* istio-rhel9-operator: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-cni-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-pilot-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-proxyv2-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-proxyv2-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n\n* istio-proxyv2-rhel9: BuildKit: Arbitrary file write and code execution via untrusted frontend (CVE-2026-33747)\n\n* istio-proxyv2-rhel9: BuildKit: Unauthorized file access via Git URL fragment subdir components (CVE-2026-33748)\n\n* istio-cni-rhel9: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n\n* istio-pilot-rhel9: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n\nBug Fix(es):\n\n* Ztunnel default value in operator contains older istio version (OSSM-13103)\n\n* OSSM operator metrics reader ClusterRole conflicts with other operators (OSSM-13106)", "title": "Details"}, {"category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use"}], "publisher": {"category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com"}, "references": [{"category": "self", "summary": "https://access.redhat.com/errata/RHSA-2026:9453", "url": "https://access.redhat.com/errata/RHSA-2026:9453"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-25679", "url": "https://access.redhat.com/security/cve/CVE-2026-25679"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33186", "url": "https://access.redhat.com/security/cve/CVE-2026-33186"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33747", "url": "https://access.redhat.com/security/cve/CVE-2026-33747"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33748", "url": "https://access.redhat.com/security/cve/CVE-2026-33748"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-34986", "url": "https://access.redhat.com/security/cve/CVE-2026-34986"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-25679", "url": "https://access.redhat.com/security/cve/cve-2026-25679"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-33186", "url": "https://access.redhat.com/security/cve/cve-2026-33186"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-33747", "url": "https://access.redhat.com/security/cve/cve-2026-33747"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-33748", "url": "https://access.redhat.com/security/cve/cve-2026-33748"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-34986", "url": "https://access.redhat.com/security/cve/cve-2026-34986"}, {"category": "external", "summary": "https://access.redhat.com/security/updates/classification", "url": "https://access.redhat.com/security/updates/classification"}, {"category": "external", "summary": "https://access.redhat.com/security/updates/classification/", "url": "https://access.redhat.com/security/updates/classification/"}, {"category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9453.json"}], "title": "Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.4", "tracking": {"current_release_date": "2026-05-19T01:23:55+00:00", "generator": {"date": "2026-05-19T01:23:55+00:00", "engine": {"name": "Red Hat SDEngine", "version": "4.8.0"}}, "id": "RHSA-2026:9453", "initial_release_date": "2026-04-21T17:29:36+00:00", "revision_history": [{"date": "2026-04-21T17:29:36+00:00", "number": "1", "summary": "Initial version"}, {"date": "2026-04-21T17:29:40+00:00", "number": "2", "summary": "Last updated version"}, {"date": "2026-05-19T01:23:55+00:00", "number": "3", "summary": "Last generated version"}], "status": "final", "version": "3"}}, "product_tree": {"branches": [{"branches": [{"branches": [{"category": "product_name", "name": "Red Hat OpenShift Service Mesh 3.2", "product": {"name": "Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2", "product_identification_helper": {"cpe": "cpe:/a:redhat:service_mesh:3.2::el9"}}}], "category": "product_family", "name": "Red Hat OpenShift Service Mesh"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-sail-operator-bundle@sha256%3A615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776677282"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-cni-rhel9@sha256%3A4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776178280"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776238602"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-rhel9-operator@sha256%3A87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776232405"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776178059"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3Af62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776291540"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3Acf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776232170"}}}], "category": "architecture", "name": "amd64"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-cni-rhel9@sha256%3A727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776178280"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776238602"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-rhel9-operator@sha256%3Adfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776232405"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776178059"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776291540"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776232170"}}}], "category": "architecture", "name": "arm64"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-cni-rhel9@sha256%3A4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776178280"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776238602"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-rhel9-operator@sha256%3A6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776232405"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776178059"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776291540"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776232170"}}}], "category": "architecture", "name": "ppc64le"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-cni-rhel9@sha256%3A1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776178280"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3Ac592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776238602"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-rhel9-operator@sha256%3A3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776232405"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776178059"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3Aa2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776291540"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776232170"}}}], "category": "architecture", "name": "s390x"}], "category": "vendor", "name": "Red Hat"}], "relationships": [{"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64 as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64 as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64 as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64 as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64 as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64 as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64 as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64 as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64 as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64 as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64 as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64 as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64 as a component of Red Hat OpenShift Service Mesh 3.2", "product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"}]}, "vulnerabilities": [{"cve": "CVE-2026-25679", "cwe": {"id": "CWE-1286", "name": "Improper Validation of Syntactic Correctness of Input"}, "discovery_date": "2026-03-06T22:02:11.567841+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2445356"}], "notes": [{"category": "description", "text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.", "title": "Vulnerability description"}, {"category": "summary", "text": "net/url: Incorrect parsing of IPv6 host literals in net/url", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-25679"}, {"category": "external", "summary": "RHBZ#2445356", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679", "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"}, {"category": "external", "summary": "https://go.dev/cl/752180", "url": "https://go.dev/cl/752180"}, {"category": "external", "summary": "https://go.dev/issue/77578", "url": "https://go.dev/issue/77578"}, {"category": "external", "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk", "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"}, {"category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-4601", "url": "https://pkg.go.dev/vuln/GO-2026-4601"}], "release_date": "2026-03-06T21:28:14.211000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:29:36+00:00", "details": "See Red Hat OpenShift Service Mesh 3.2.4 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9453"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "net/url: Incorrect parsing of IPv6 host literals in net/url"}, {"cve": "CVE-2026-33186", "cwe": {"id": "CWE-551", "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"}, "discovery_date": "2026-03-20T23:02:27.802640+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2449833"}], "notes": [{"category": "description", "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.", "title": "Vulnerability description"}, {"category": "summary", "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-33186"}, {"category": "external", "summary": "RHBZ#2449833", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"}, {"category": "external", "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3", "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"}], "release_date": "2026-03-20T22:23:32.147000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:29:36+00:00", "details": "See Red Hat OpenShift Service Mesh 3.2.4 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9453"}, {"category": "workaround", "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"}, {"cve": "CVE-2026-33747", "cwe": {"id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}, "discovery_date": "2026-03-27T02:01:29.921765+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2452076"}], "notes": [{"category": "description", "text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.", "title": "Vulnerability description"}, {"category": "summary", "text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-33747"}, {"category": "external", "summary": "RHBZ#2452076", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"}, {"category": "external", "summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1", "url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"}, {"category": "external", "summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj", "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"}], "release_date": "2026-03-27T00:49:06.165000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:29:36+00:00", "details": "See Red Hat OpenShift Service Mesh 3.2.4 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9453"}, {"category": "workaround", "details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "threats": [{"category": "impact", "details": "Moderate"}], "title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"}, {"cve": "CVE-2026-33748", "cwe": {"id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}, "discovery_date": "2026-03-27T15:02:00.107493+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2452271"}], "notes": [{"category": "description", "text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.", "title": "Vulnerability description"}, {"category": "summary", "text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-33748"}, {"category": "external", "summary": "RHBZ#2452271", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"}, {"category": "external", "summary": "https://docs.docker.com/build/concepts/context/#url-fragments", "url": "https://docs.docker.com/build/concepts/context/#url-fragments"}, {"category": "external", "summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1", "url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"}, {"category": "external", "summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg", "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"}], "release_date": "2026-03-27T14:00:21.200000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:29:36+00:00", "details": "See Red Hat OpenShift Service Mesh 3.2.4 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9453"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "threats": [{"category": "impact", "details": "Moderate"}], "title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"}, {"cve": "CVE-2026-34986", "cwe": {"id": "CWE-131", "name": "Incorrect Calculation of Buffer Size"}, "discovery_date": "2026-04-06T17:01:34.639203+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2455470"}], "notes": [{"category": "description", "text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.", "title": "Vulnerability description"}, {"category": "summary", "text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-34986"}, {"category": "external", "summary": "RHBZ#2455470", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"}, {"category": "external", "summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8", "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"}, {"category": "external", "summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants", "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"}], "release_date": "2026-04-06T16:22:45.353000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:29:36+00:00", "details": "See Red Hat OpenShift Service Mesh 3.2.4 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9453"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1aa2834ce676ef21f5a67e3144fe62677d9bf7b57a9401d74fab7cf569da9911_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4d39ae3b09ef2ee139705831bff3f9070d2590d59887a488bfdbb36b590dec13_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:4f5e7e28f111429e2c9376ac5f42d717f13eea1c3a80357fe001a9caf5c25fba_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:727908a49c6edf57609ac8a75d5aab182a79530e88819ea8a1df8a9610826c02_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:284458d236e45ffa8a865917bf6253764dbe0f6602173ba3f6733b0a40c5a741_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2b6f5aa276fe5848c6f377c51be574045b04ea784374bcb54e496f2a297f02b0_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5b95c5cfc63958a16f3b30a42f16b9ff26b2f2c9f8e3c539fcec75b721edfb88_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c592a7d2b6b5997972ed7a2deda29c5e9bb03c2b28e42d1f6f57ae1639629c11_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:193b36cc5bc389b68c6e8080e1d47c3860aab22f7a4ee262c90b864967e23a97_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:31e020f606b687b82712fe32823a392ed1abcc9563845ea81fbfce616b99e6b1_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7e688abcea40cae3f552b2dc5abf0da092e8a0d7a3f04f3cb5d15c5b4fb1a1f2_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:8111afc971379ee93fef9ebddfccf75102309c134d25f9d6d3de46f59e809001_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9d1e9ff2ab9a3f84328cdbe49d4263d34e9ef1ef14d689a32d87534d7631cb0d_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2904680a45ff398adce27c1cbc539bf08e7f53aa64fadf0d6db74f1296421ad_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:f62ae2005f3c153975695253d786a00a1a5827b92f96328a0be425fdd4125e69_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:3f1d2206dea7630015fac80f8b8c6f7a6a1e1c17e477d1d54db4690b4453e6a0_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:6015e887371eed1bd162363ebd16ca4f20bd8077df166b455685579e808a9292_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:87953048140227569e7028187ed92cc0960bbc055d62a6755c5a1fdcf10510ec_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:dfb94112b66ce7fe56a642371749bf87e979b0136652328b124cc384818ef6c3_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:615f4ab167e82d54f5cd9bea15e0673293ec42bf19cfa0ccc15eb1d20b7db18a_amd64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:56140955dffe7c205dc944835637f83f04c5a82ba6f192dcfb034aa9cf800f8f_arm64", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:62b18afbdedf572866fd0dca6aa9e2426608d0b1cf011acef9f9044f4fbe4711_ppc64le", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:74b244e23b80d7996138a01814de1cb9d679ce7ed4156b5521fd76efc1bb5db5_s390x", "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:cf5b5c9c6ba78281d0080d426f71c5b7b3e2b46db3644d153862268c0b4bf538_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"}], "containers": {"cna": {"x_gcve": [{"recordType": "advisory", "vulnId": "rhsa-2026:9453"}]}}}, {"document": {"aggregate_severity": {"namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important"}, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": {"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": {"label": "WHITE", "url": "https://www.first.org/tlp/"}}, "lang": "en", "notes": [{"category": "summary", "text": "Red Hat OpenShift Service Mesh 3.1.7\n\nThis update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic"}, {"category": "general", "text": "Red Hat OpenShift Service Mesh 3.1.7, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.\n\nFixes/Improvements:\n\nSecurity Fix(es):\n\n* istio-rhel9-operator: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-cni-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-pilot-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-proxyv2-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-proxyv2-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n\n* istio-proxyv2-rhel9: BuildKit: Arbitrary file write and code execution via untrusted frontend (CVE-2026-33747)\n\n* istio-proxyv2-rhel9: BuildKit: Unauthorized file access via Git URL fragment subdir components (CVE-2026-33748)\n\n* istio-cni-rhel9: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n\n* istio-pilot-rhel9: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n\nBug Fix(es):\n\n* OSSM operator metrics reader ClusterRole conflicts with other operators (OSSM-13106)", "title": "Details"}, {"category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use"}], "publisher": {"category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com"}, "references": [{"category": "self", "summary": "https://access.redhat.com/errata/RHSA-2026:9448", "url": "https://access.redhat.com/errata/RHSA-2026:9448"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-25679", "url": "https://access.redhat.com/security/cve/CVE-2026-25679"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33186", "url": "https://access.redhat.com/security/cve/CVE-2026-33186"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33747", "url": "https://access.redhat.com/security/cve/CVE-2026-33747"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33748", "url": "https://access.redhat.com/security/cve/CVE-2026-33748"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-34986", "url": "https://access.redhat.com/security/cve/CVE-2026-34986"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-25679", "url": "https://access.redhat.com/security/cve/cve-2026-25679"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-33186", "url": "https://access.redhat.com/security/cve/cve-2026-33186"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-33747", "url": "https://access.redhat.com/security/cve/cve-2026-33747"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-33748", "url": "https://access.redhat.com/security/cve/cve-2026-33748"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-34986", "url": "https://access.redhat.com/security/cve/cve-2026-34986"}, {"category": "external", "summary": "https://access.redhat.com/security/updates/classification", "url": "https://access.redhat.com/security/updates/classification"}, {"category": "external", "summary": "https://access.redhat.com/security/updates/classification/", "url": "https://access.redhat.com/security/updates/classification/"}, {"category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9448.json"}], "title": "Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.7", "tracking": {"current_release_date": "2026-05-19T01:23:54+00:00", "generator": {"date": "2026-05-19T01:23:54+00:00", "engine": {"name": "Red Hat SDEngine", "version": "4.8.0"}}, "id": "RHSA-2026:9448", "initial_release_date": "2026-04-21T17:23:46+00:00", "revision_history": [{"date": "2026-04-21T17:23:46+00:00", "number": "1", "summary": "Initial version"}, {"date": "2026-04-21T17:23:52+00:00", "number": "2", "summary": "Last updated version"}, {"date": "2026-05-19T01:23:54+00:00", "number": "3", "summary": "Last generated version"}], "status": "final", "version": "3"}}, "product_tree": {"branches": [{"branches": [{"branches": [{"category": "product_name", "name": "Red Hat OpenShift Service Mesh 3.1", "product": {"name": "Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1", "product_identification_helper": {"cpe": "cpe:/a:redhat:service_mesh:3.1::el9"}}}], "category": "product_family", "name": "Red Hat OpenShift Service Mesh"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-sail-operator-bundle@sha256%3A2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776677125"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-cni-rhel9@sha256%3A0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776238635"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776412783"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-rhel9-operator@sha256%3A149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776232570"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-pilot-rhel9@sha256%3Ae496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776256858"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776315466"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "product_id": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh-tech-preview&tag=1776177800"}}}], "category": "architecture", "name": "amd64"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-cni-rhel9@sha256%3A65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776238635"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776412783"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-rhel9-operator@sha256%3Abfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776232570"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776256858"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776315466"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "product_id": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh-tech-preview&tag=1776177800"}}}], "category": "architecture", "name": "arm64"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-cni-rhel9@sha256%3A2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776238635"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776412783"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-rhel9-operator@sha256%3A8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776232570"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-pilot-rhel9@sha256%3Aa55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776256858"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776315466"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh-tech-preview&tag=1776177800"}}}], "category": "architecture", "name": "ppc64le"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-cni-rhel9@sha256%3A3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776238635"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776412783"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-rhel9-operator@sha256%3A2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776232570"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776256858"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776315466"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "product_id": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh-tech-preview&tag=1776177800"}}}], "category": "architecture", "name": "s390x"}], "category": "vendor", "name": "Red Hat"}], "relationships": [{"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64 as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64 as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64 as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64 as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64 as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64 as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64 as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64 as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64 as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64 as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64 as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64 as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64 as a component of Red Hat OpenShift Service Mesh 3.1", "product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"}]}, "vulnerabilities": [{"cve": "CVE-2026-25679", "cwe": {"id": "CWE-1286", "name": "Improper Validation of Syntactic Correctness of Input"}, "discovery_date": "2026-03-06T22:02:11.567841+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2445356"}], "notes": [{"category": "description", "text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.", "title": "Vulnerability description"}, {"category": "summary", "text": "net/url: Incorrect parsing of IPv6 host literals in net/url", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-25679"}, {"category": "external", "summary": "RHBZ#2445356", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679", "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"}, {"category": "external", "summary": "https://go.dev/cl/752180", "url": "https://go.dev/cl/752180"}, {"category": "external", "summary": "https://go.dev/issue/77578", "url": "https://go.dev/issue/77578"}, {"category": "external", "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk", "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"}, {"category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-4601", "url": "https://pkg.go.dev/vuln/GO-2026-4601"}], "release_date": "2026-03-06T21:28:14.211000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:23:46+00:00", "details": "See Red Hat OpenShift Service Mesh 3.1.7 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9448"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "net/url: Incorrect parsing of IPv6 host literals in net/url"}, {"cve": "CVE-2026-33186", "cwe": {"id": "CWE-551", "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"}, "discovery_date": "2026-03-20T23:02:27.802640+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2449833"}], "notes": [{"category": "description", "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.", "title": "Vulnerability description"}, {"category": "summary", "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-33186"}, {"category": "external", "summary": "RHBZ#2449833", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"}, {"category": "external", "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3", "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"}], "release_date": "2026-03-20T22:23:32.147000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:23:46+00:00", "details": "See Red Hat OpenShift Service Mesh 3.1.7 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9448"}, {"category": "workaround", "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"}, {"cve": "CVE-2026-33747", "cwe": {"id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}, "discovery_date": "2026-03-27T02:01:29.921765+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2452076"}], "notes": [{"category": "description", "text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.", "title": "Vulnerability description"}, {"category": "summary", "text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-33747"}, {"category": "external", "summary": "RHBZ#2452076", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"}, {"category": "external", "summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1", "url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"}, {"category": "external", "summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj", "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"}], "release_date": "2026-03-27T00:49:06.165000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:23:46+00:00", "details": "See Red Hat OpenShift Service Mesh 3.1.7 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9448"}, {"category": "workaround", "details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "threats": [{"category": "impact", "details": "Moderate"}], "title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"}, {"cve": "CVE-2026-33748", "cwe": {"id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}, "discovery_date": "2026-03-27T15:02:00.107493+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2452271"}], "notes": [{"category": "description", "text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.", "title": "Vulnerability description"}, {"category": "summary", "text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-33748"}, {"category": "external", "summary": "RHBZ#2452271", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"}, {"category": "external", "summary": "https://docs.docker.com/build/concepts/context/#url-fragments", "url": "https://docs.docker.com/build/concepts/context/#url-fragments"}, {"category": "external", "summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1", "url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"}, {"category": "external", "summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg", "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"}], "release_date": "2026-03-27T14:00:21.200000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:23:46+00:00", "details": "See Red Hat OpenShift Service Mesh 3.1.7 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9448"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "threats": [{"category": "impact", "details": "Moderate"}], "title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"}, {"cve": "CVE-2026-34986", "cwe": {"id": "CWE-131", "name": "Incorrect Calculation of Buffer Size"}, "discovery_date": "2026-04-06T17:01:34.639203+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2455470"}], "notes": [{"category": "description", "text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.", "title": "Vulnerability description"}, {"category": "summary", "text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-34986"}, {"category": "external", "summary": "RHBZ#2455470", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"}, {"category": "external", "summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8", "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"}, {"category": "external", "summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants", "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"}], "release_date": "2026-04-06T16:22:45.353000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:23:46+00:00", "details": "See Red Hat OpenShift Service Mesh 3.1.7 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9448"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:1a1a9cf19de45b8920e70d8123da7f1e7b2568fe356d98203dc0053cee541339_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:46f11470d7627e5a74663770efb3e8118910f5e2f84a1191f6b14805efc10c73_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:883910879ec4940cd9221bd64fbfa392d1ca28503f4e63277169441cb0addeae_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:8e5be961ce5b17d43e49ad3a0bd5339af75f19d46d11881423c1e86b8bc45a0c_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0f0dfc2423b897ec2b43dc9fff794690809d845f065c7ae4635191348f4af1d2_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2040cfbc531f36c1a8387e41911e3e9d26f53a4ef4a24bc712cbe7f33264f356_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:3ba4910ac8b0bed39310344d4cfa21c645922f80cd287b7f66f4b2873871a26a_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:65368e8e6648247d5efe4edb74085384e833d7cac67c93518f3a6efc059fafbd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:18dc040c6df63b00dbb419895f754d4d728122cf8e245d40cfd9d1f625609bfc_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:4d4ba0754e38ed8824e2a4c1c0e9f603b55650366883339acb67efdbcefae8e0_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5aee5dd20238fc15d863e2b700f4b510a758d6fcb696b384bcb7aa0854061428_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:629b6b3147b374e2ee5398b4778ef13d7377bc617391df92e0e7b19a4194a6aa_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:702f60c7aa0927bf2b8a4e2077d972222a0fe13b06a6afd5ce6d3e518cae42a5_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:7bc9ffa1c1d9895be132f424d80643bc804a4e99d886762ed16bc8c3d2121c74_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:a55d6fe6d7d1d94134e35aa47f3578348b8f0185b7f2c51a69aecb6b8eb2e976_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e496840d6cf9f281ba71596f477044f370530f37cc5a694d7d538eb37b4f903a_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5d1dda2038649d6dcae41d9ef83d0391cdb7499bb6ebedf8453d197fb06ce055_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7055e7c41cc056bfb96e5b429a78e27e7a7584d97f26eec6601cad5eca403cc9_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7c918bae6c51890395296e41239ae3101226595d07b880aefd02e765119dbffb_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:149448cd15ef98964551a2527d3287851e3e7726a64e10f94b846a41ed756766_amd64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:2fc0af6b178529161647bc102dd8c762dd850b2598296bf7b045e6b1e31b6606_s390x", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8f18db5e45ba3934b5878c824cd38ffe989fedad1d28c7d1b39e472f4c0fb43a_ppc64le", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:bfd02648a63140c8f810011cbc3f345e0e883a6c3893bb785319fd74871b9ccd_arm64", "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:2f1655b06910cc596ef10f55ad2d34882b82e30b4c6c1a2456bc25cf6e4928c5_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"}], "containers": {"cna": {"x_gcve": [{"recordType": "advisory", "vulnId": "rhsa-2026:9448"}]}}}, {"document": {"aggregate_severity": {"namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important"}, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": {"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": {"label": "WHITE", "url": "https://www.first.org/tlp/"}}, "lang": "en", "notes": [{"category": "summary", "text": "Red Hat OpenShift Service Mesh 3.0.10\n\nThis update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic"}, {"category": "general", "text": "Red Hat OpenShift Service Mesh 3.0.10, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.\n\nFixes/Improvements:\n\nSecurity Fix(es):\n\n* istio-rhel9-operator: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-cni-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-pilot-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-proxyv2-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* istio-proxyv2-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n\n* istio-proxyv2-rhel9: BuildKit: Arbitrary file write and code execution via untrusted frontend (CVE-2026-33747)\n\n* istio-proxyv2-rhel9: BuildKit: Unauthorized file access via Git URL fragment subdir components (CVE-2026-33748)", "title": "Details"}, {"category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use"}], "publisher": {"category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com"}, "references": [{"category": "self", "summary": "https://access.redhat.com/errata/RHSA-2026:9440", "url": "https://access.redhat.com/errata/RHSA-2026:9440"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-25679", "url": "https://access.redhat.com/security/cve/CVE-2026-25679"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33186", "url": "https://access.redhat.com/security/cve/CVE-2026-33186"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33747", "url": "https://access.redhat.com/security/cve/CVE-2026-33747"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33748", "url": "https://access.redhat.com/security/cve/CVE-2026-33748"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-25679", "url": "https://access.redhat.com/security/cve/cve-2026-25679"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-33186", "url": "https://access.redhat.com/security/cve/cve-2026-33186"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-33747", "url": "https://access.redhat.com/security/cve/cve-2026-33747"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-33748", "url": "https://access.redhat.com/security/cve/cve-2026-33748"}, {"category": "external", "summary": "https://access.redhat.com/security/updates/classification", "url": "https://access.redhat.com/security/updates/classification"}, {"category": "external", "summary": "https://access.redhat.com/security/updates/classification/", "url": "https://access.redhat.com/security/updates/classification/"}, {"category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9440.json"}], "title": "Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.10", "tracking": {"current_release_date": "2026-05-19T01:23:54+00:00", "generator": {"date": "2026-05-19T01:23:54+00:00", "engine": {"name": "Red Hat SDEngine", "version": "4.8.0"}}, "id": "RHSA-2026:9440", "initial_release_date": "2026-04-21T17:12:20+00:00", "revision_history": [{"date": "2026-04-21T17:12:20+00:00", "number": "1", "summary": "Initial version"}, {"date": "2026-04-21T17:12:28+00:00", "number": "2", "summary": "Last updated version"}, {"date": "2026-05-19T01:23:54+00:00", "number": "3", "summary": "Last generated version"}], "status": "final", "version": "3"}}, "product_tree": {"branches": [{"branches": [{"branches": [{"category": "product_name", "name": "Red Hat OpenShift Service Mesh 3", "product": {"name": "Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3", "product_identification_helper": {"cpe": "cpe:/a:redhat:service_mesh:3.0::el9"}}}], "category": "product_family", "name": "Red Hat OpenShift Service Mesh"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-sail-operator-bundle@sha256%3Ac09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776442219"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-cni-rhel9@sha256%3Abf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776181080"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776181079"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-rhel9-operator@sha256%3A5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776180733"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-pilot-rhel9@sha256%3Ab00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776181166"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776240392"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "product": {"name": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "product_id": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "product_identification_helper": {"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8?arch=amd64&repository_url=registry.redhat.io/openshift-service-mesh-dev-preview-beta&tag=1776181708"}}}], "category": "architecture", "name": "amd64"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-cni-rhel9@sha256%3A46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776181080"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776181079"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-rhel9-operator@sha256%3Ab4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776180733"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776181166"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3Aa2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776240392"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "product": {"name": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "product_id": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "product_identification_helper": {"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f?arch=arm64&repository_url=registry.redhat.io/openshift-service-mesh-dev-preview-beta&tag=1776181708"}}}], "category": "architecture", "name": "arm64"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-cni-rhel9@sha256%3A1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776181080"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776181079"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-rhel9-operator@sha256%3Aaea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776180733"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-pilot-rhel9@sha256%3Ae86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776181166"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3Ae33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776240392"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "product": {"name": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "product_id": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "product_identification_helper": {"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd?arch=ppc64le&repository_url=registry.redhat.io/openshift-service-mesh-dev-preview-beta&tag=1776181708"}}}], "category": "architecture", "name": "ppc64le"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-cni-rhel9@sha256%3A86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776181080"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776181079"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-rhel9-operator@sha256%3Ad37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776180733"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-pilot-rhel9@sha256%3Ab383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776181166"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh&tag=1776240392"}}}, {"category": "product_version", "name": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "product": {"name": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "product_id": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "product_identification_helper": {"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01?arch=s390x&repository_url=registry.redhat.io/openshift-service-mesh-dev-preview-beta&tag=1776181708"}}}], "category": "architecture", "name": "s390x"}], "category": "vendor", "name": "Red Hat"}], "relationships": [{"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64 as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64 as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64 as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64 as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64 as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64 as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64 as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64 as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64 as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64 as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64 as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64 as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64 as a component of Red Hat OpenShift Service Mesh 3", "product_id": "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"}, "product_reference": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64", "relates_to_product_reference": "Red Hat OpenShift Service Mesh 3"}]}, "vulnerabilities": [{"cve": "CVE-2026-25679", "cwe": {"id": "CWE-1286", "name": "Improper Validation of Syntactic Correctness of Input"}, "discovery_date": "2026-03-06T22:02:11.567841+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2445356"}], "notes": [{"category": "description", "text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.", "title": "Vulnerability description"}, {"category": "summary", "text": "net/url: Incorrect parsing of IPv6 host literals in net/url", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-25679"}, {"category": "external", "summary": "RHBZ#2445356", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679", "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"}, {"category": "external", "summary": "https://go.dev/cl/752180", "url": "https://go.dev/cl/752180"}, {"category": "external", "summary": "https://go.dev/issue/77578", "url": "https://go.dev/issue/77578"}, {"category": "external", "summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk", "url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"}, {"category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-4601", "url": "https://pkg.go.dev/vuln/GO-2026-4601"}], "release_date": "2026-03-06T21:28:14.211000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:12:20+00:00", "details": "See Red Hat OpenShift Service Mesh 3.0.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0", "product_ids": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9440"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "net/url: Incorrect parsing of IPv6 host literals in net/url"}, {"cve": "CVE-2026-33186", "cwe": {"id": "CWE-551", "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"}, "discovery_date": "2026-03-20T23:02:27.802640+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2449833"}], "notes": [{"category": "description", "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.", "title": "Vulnerability description"}, {"category": "summary", "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-33186"}, {"category": "external", "summary": "RHBZ#2449833", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"}, {"category": "external", "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3", "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"}], "release_date": "2026-03-20T22:23:32.147000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:12:20+00:00", "details": "See Red Hat OpenShift Service Mesh 3.0.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0", "product_ids": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9440"}, {"category": "workaround", "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.", "product_ids": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"}, {"cve": "CVE-2026-33747", "cwe": {"id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}, "discovery_date": "2026-03-27T02:01:29.921765+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2452076"}], "notes": [{"category": "description", "text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.", "title": "Vulnerability description"}, {"category": "summary", "text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-33747"}, {"category": "external", "summary": "RHBZ#2452076", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"}, {"category": "external", "summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1", "url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"}, {"category": "external", "summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj", "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"}], "release_date": "2026-03-27T00:49:06.165000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:12:20+00:00", "details": "See Red Hat OpenShift Service Mesh 3.0.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0", "product_ids": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9440"}, {"category": "workaround", "details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.", "product_ids": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}], "threats": [{"category": "impact", "details": "Moderate"}], "title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"}, {"cve": "CVE-2026-33748", "cwe": {"id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}, "discovery_date": "2026-03-27T15:02:00.107493+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2452271"}], "notes": [{"category": "description", "text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.", "title": "Vulnerability description"}, {"category": "summary", "text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le"], "known_not_affected": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-33748"}, {"category": "external", "summary": "RHBZ#2452271", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"}, {"category": "external", "summary": "https://docs.docker.com/build/concepts/context/#url-fragments", "url": "https://docs.docker.com/build/concepts/context/#url-fragments"}, {"category": "external", "summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1", "url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"}, {"category": "external", "summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg", "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"}], "release_date": "2026-03-27T14:00:21.200000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T17:12:20+00:00", "details": "See Red Hat OpenShift Service Mesh 3.0.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0", "product_ids": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9440"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "products": ["Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:3c8a43dac72fcb80665579849150ce601046fbcf6c2306583b0490605115ac0f_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:693b5c635be68ad83f43140b36603d99a20c879bf345d12a44890b45bcd07b01_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:734219183920ce01e754291dd7611715a69a9403f9633b3400755786fcc275cd_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:8cbf69617323c8c5a34eb52591608ec28f43de129ed6140baf3f9a9a7fa483f8_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1fd5ff140d8d559cfd3c5ba85036579e0e72fa4ce7125e16c1ea24d70e94ff86_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:46e186d49081b64a4291e49e5f2acd77184699b66cdc08acdbb7e82c259b2b74_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:86787f164505d6ef3917997ad7a424d65da313fe50f0f952f13f55ce9d798b99_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:bf1d68837cdb05f9c95e3c42692cc9e83fd4a0c5ac3dc7da3ffae49626502a9c_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2a6694107707703209034473f159ab1f7e22106c7d1e1d722f373627dd9d7c47_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5faebff2c06c92bbff9453f577c9b6c259e5365fb4f452f630c592e7a06673a2_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8bec8dff7483dcb749deca1d7df6042b94d2a84abed4cf82e69230a8c28c59ca_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:9fa72261b4c4a178430ab10cecb79e1c9599740c3fc06192014245b1db1edffc_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:66d3a47929e31772f8cde153eb0523fb0f1696547ab2dbe98b30a453306b8adc_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b00869deda7269236cb315b95c8abf4930b97995dcac9212a99b561251a401a9_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b383628612ef6aff4328bd880b2400fd4011b53a1429a2ffacfc4d15f515d634_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e86ddb9ffc3b50dc508f5eae310bcf1e7c994e7dbe3d538baebc1dc41316722d_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:5f9b2a458158fbf02a611d8d2822c6425d186ce4cd73c091a097a3c0218f18ff_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a2650c47f50206054063e8a62a8073d29a29808b21c2ab3d9964bd70995ff6eb_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:e33cee7e3c778713dd44e3109609155061de98b83fbb91a89182179163ec05d4_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5931cffa333330d80fa57431080621e8f39cdb9257201fad7d56da31b01c569f_amd64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:aea2066308c02465b7d1edc6afd52d3b6c37a92d1ca38e929a7354be2bb36493_ppc64le", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:b4339c9932dc7d84ce95f6b84a70f428f5f8da03e607f19602da5f83b6cacf1b_arm64", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:d37b966d871535c9277cda4c8aef1d9306b4f47f38043718ab4f13ccebbebc6b_s390x", "Red Hat OpenShift Service Mesh 3:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:c09e38353c9125431890b9cbd0be760b8b6c3d1faf6bb515e20c2c414dd70f2d_amd64"]}], "threats": [{"category": "impact", "details": "Moderate"}], "title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"}], "containers": {"cna": {"x_gcve": [{"recordType": "advisory", "vulnId": "rhsa-2026:9440"}]}}}, {"document": {"aggregate_severity": {"namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important"}, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": {"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": {"label": "WHITE", "url": "https://www.first.org/tlp/"}}, "lang": "en", "notes": [{"category": "summary", "text": "Red Hat build of OpenTelemetry 3.9.2 has been released", "title": "Topic"}, {"category": "general", "text": "This release of the Red Hat build of OpenTelemetry provides security improvements.\n\n\nBreaking changes:\n\n* None\n\n\nDeprecations:\n\n* None\n\n\nTechnology Preview features:\n\n* None\n\n\nEnhancements:\n\n* None\n\n\nBug fixes:\n\n* XPath library vulnerability is fixed: Previously, the 'github.com/antchfx/xpath' library was vulnerable to a denial of service (DoS) attack. This issue occurred because specially crafted boolean XPath expressions that evaluated to true caused an infinite loop in the 'logicalQuery.Select' function, leading to 100% CPU utilization. With this update, the XPath library properly handles these expressions and prevents infinite loops. As a result, the system is no longer vulnerable to this DoS condition. For more information, see https://access.redhat.com/security/cve/cve-2026-32287.\n\n* gRPC-Go authorization bypass vulnerability is fixed: Previously, gRPC-Go was vulnerable to an authorization bypass attack. This issue occurred because the HTTP/2 ':path' pseudo-header was not properly validated. Remote attackers could send raw HTTP/2 frames with a malformed ':path' that omitted the mandatory leading slash to bypass defined security policies. With this update, gRPC-Go properly validates the ':path' pseudo-header and rejects malformed requests. As a result, attackers can no longer bypass security policies to gain unauthorized access to services or disclose information. For more information, see https://access.redhat.com/security/cve/cve-2026-33186.\n\n* Go JOSE denial of service vulnerability is fixed: Previously, the Go JOSE library for handling JSON Web Encryption (JWE) objects was vulnerable to a denial of service (DoS) attack. This issue occurred because the application failed when decrypting a specially crafted JWE object that specified a key wrapping algorithm but contained an empty encrypted key field. With this update, Go JOSE properly validates the encrypted key field before decryption. As a result, the application no longer crashes when processing malformed JWE objects, and the service remains available to legitimate users. For more information, see https://access.redhat.com/security/cve/cve-2026-34986.\n\n\nKnown issues:\n\n* The filesystem scraper does not produce the `system.filesystem.inodes.usage` and `system.filesystem.usage` metrics in the Host Metrics Receiver after upgrading from Collector version 0.142.0 to 0.143.0 or later. No known workaround exists. For more information, see https://issues.redhat.com/browse/TRACING-5963.", "title": "Details"}, {"category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use"}], "publisher": {"category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com"}, "references": [{"category": "self", "summary": "https://access.redhat.com/errata/RHSA-2026:9388", "url": "https://access.redhat.com/errata/RHSA-2026:9388"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-32287", "url": "https://access.redhat.com/security/cve/CVE-2026-32287"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33186", "url": "https://access.redhat.com/security/cve/CVE-2026-33186"}, {"category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-34986", "url": "https://access.redhat.com/security/cve/CVE-2026-34986"}, {"category": "external", "summary": "https://access.redhat.com/security/updates/classification/", "url": "https://access.redhat.com/security/updates/classification/"}, {"category": "external", "summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry", "url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry"}, {"category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9388.json"}], "title": "Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.2 release", "tracking": {"current_release_date": "2026-05-19T01:23:53+00:00", "generator": {"date": "2026-05-19T01:23:53+00:00", "engine": {"name": "Red Hat SDEngine", "version": "4.8.0"}}, "id": "RHSA-2026:9388", "initial_release_date": "2026-04-21T15:19:05+00:00", "revision_history": [{"date": "2026-04-21T15:19:05+00:00", "number": "1", "summary": "Initial version"}, {"date": "2026-04-21T15:19:07+00:00", "number": "2", "summary": "Last updated version"}, {"date": "2026-05-19T01:23:53+00:00", "number": "3", "summary": "Last generated version"}], "status": "final", "version": "3"}}, "product_tree": {"branches": [{"branches": [{"branches": [{"category": "product_name", "name": "Red Hat OpenShift distributed tracing 3.9.3", "product": {"name": "Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3", "product_identification_helper": {"cpe": "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"}}}], "category": "product_family", "name": "Red Hat OpenShift distributed tracing"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64", "product": {"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64", "product_id": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64", "product_identification_helper": {"purl": "pkg:oci/opentelemetry-operator-bundle@sha256%3A333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea?arch=amd64&repository_url=registry.redhat.io/rhosdt&tag=1776245088"}}}, {"category": "product_version", "name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "product": {"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "product_identification_helper": {"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330?arch=amd64&repository_url=registry.redhat.io/rhosdt&tag=1776185379"}}}, {"category": "product_version", "name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "product": {"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "product_identification_helper": {"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd?arch=amd64&repository_url=registry.redhat.io/rhosdt&tag=1776185352"}}}, {"category": "product_version", "name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "product": {"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "product_identification_helper": {"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3Abcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497?arch=amd64&repository_url=registry.redhat.io/rhosdt&tag=1776185328"}}}], "category": "architecture", "name": "amd64"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64", "product": {"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64", "product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64", "product_identification_helper": {"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3Aff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6?arch=arm64&repository_url=registry.redhat.io/rhosdt&tag=1776185379"}}}, {"category": "product_version", "name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "product": {"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "product_identification_helper": {"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857?arch=arm64&repository_url=registry.redhat.io/rhosdt&tag=1776185352"}}}, {"category": "product_version", "name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "product": {"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "product_identification_helper": {"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3A28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb?arch=arm64&repository_url=registry.redhat.io/rhosdt&tag=1776185328"}}}], "category": "architecture", "name": "arm64"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "product": {"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "product_identification_helper": {"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d?arch=ppc64le&repository_url=registry.redhat.io/rhosdt&tag=1776185379"}}}, {"category": "product_version", "name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "product": {"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "product_identification_helper": {"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506?arch=ppc64le&repository_url=registry.redhat.io/rhosdt&tag=1776185352"}}}, {"category": "product_version", "name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "product": {"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "product_identification_helper": {"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3A9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99?arch=ppc64le&repository_url=registry.redhat.io/rhosdt&tag=1776185328"}}}], "category": "architecture", "name": "ppc64le"}, {"branches": [{"category": "product_version", "name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "product": {"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "product_identification_helper": {"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4?arch=s390x&repository_url=registry.redhat.io/rhosdt&tag=1776185379"}}}, {"category": "product_version", "name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "product": {"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "product_identification_helper": {"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c?arch=s390x&repository_url=registry.redhat.io/rhosdt&tag=1776185352"}}}, {"category": "product_version", "name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x", "product": {"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x", "product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x", "product_identification_helper": {"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3Aca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1?arch=s390x&repository_url=registry.redhat.io/rhosdt&tag=1776185328"}}}], "category": "architecture", "name": "s390x"}], "category": "vendor", "name": "Red Hat"}], "relationships": [{"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le"}, "product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64"}, "product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x as a component of Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x"}, "product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"}, "product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64", "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64"}, "product_reference": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64", "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x as a component of Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x"}, "product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64"}, "product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64"}, "product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le"}, "product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64"}, "product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le"}, "product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64"}, "product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"}, {"category": "default_component_of", "full_product_name": {"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x as a component of Red Hat OpenShift distributed tracing 3.9.3", "product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"}, "product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x", "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"}]}, "vulnerabilities": [{"cve": "CVE-2026-32287", "cwe": {"id": "CWE-606", "name": "Unchecked Input for Loop Condition"}, "discovery_date": "2026-03-26T20:02:37.779428+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2451856"}], "notes": [{"category": "description", "text": "A flaw was found in github.com/antchfx/xpath. An attacker could exploit this vulnerability by providing specially crafted boolean XPath expressions that evaluate to true. This can cause an infinite loop within the logicalQuery.Select function, leading to 100% CPU utilization. The consequence is a Denial of Service (DoS) condition, making the affected system unresponsive.", "title": "Vulnerability description"}, {"category": "summary", "text": "github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"], "known_not_affected": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-32287"}, {"category": "external", "summary": "RHBZ#2451856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451856"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32287", "url": "https://www.cve.org/CVERecord?id=CVE-2026-32287"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32287", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32287"}, {"category": "external", "summary": "https://github.com/antchfx/xpath/commit/afd4762cc342af56345a3fb4002a59281fcab494", "url": "https://github.com/antchfx/xpath/commit/afd4762cc342af56345a3fb4002a59281fcab494"}, {"category": "external", "summary": "https://github.com/antchfx/xpath/issues/121", "url": "https://github.com/antchfx/xpath/issues/121"}, {"category": "external", "summary": "https://github.com/golang/vulndb/issues/4526", "url": "https://github.com/golang/vulndb/issues/4526"}, {"category": "external", "summary": "https://pkg.go.dev/vuln/GO-2026-4526", "url": "https://pkg.go.dev/vuln/GO-2026-4526"}], "release_date": "2026-03-26T19:40:52.142000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T15:19:05+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators", "product_ids": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9388"}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"]}], "threats": [{"category": "impact", "details": "Moderate"}], "title": "github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions"}, {"cve": "CVE-2026-33186", "cwe": {"id": "CWE-551", "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"}, "discovery_date": "2026-03-20T23:02:27.802640+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2449833"}], "notes": [{"category": "description", "text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.", "title": "Vulnerability description"}, {"category": "summary", "text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"], "known_not_affected": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-33186"}, {"category": "external", "summary": "RHBZ#2449833", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"}, {"category": "external", "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3", "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"}], "release_date": "2026-03-20T22:23:32.147000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T15:19:05+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators", "product_ids": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9388"}, {"category": "workaround", "details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.", "product_ids": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "products": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"}, {"cve": "CVE-2026-34986", "cwe": {"id": "CWE-131", "name": "Incorrect Calculation of Buffer Size"}, "discovery_date": "2026-04-06T17:01:34.639203+00:00", "flags": [{"label": "vulnerable_code_not_present", "product_ids": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"]}], "ids": [{"system_name": "Red Hat Bugzilla ID", "text": "2455470"}], "notes": [{"category": "description", "text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.", "title": "Vulnerability description"}, {"category": "summary", "text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object", "title": "Vulnerability summary"}, {"category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability"}], "product_status": {"fixed": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"], "known_not_affected": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"]}, "references": [{"category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-34986"}, {"category": "external", "summary": "RHBZ#2455470", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"}, {"category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"}, {"category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"}, {"category": "external", "summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8", "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"}, {"category": "external", "summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants", "url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"}], "release_date": "2026-04-06T16:22:45.353000+00:00", "remediations": [{"category": "vendor_fix", "date": "2026-04-21T15:19:05+00:00", "details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators", "product_ids": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"], "restart_required": {"category": "none"}, "url": "https://access.redhat.com/errata/RHSA-2026:9388"}, {"category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"]}], "scores": [{"cvss_v3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "products": ["Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64", "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"]}], "threats": [{"category": "impact", "details": "Important"}], "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"}], "containers": {"cna": {"x_gcve": [{"recordType": "advisory", "vulnId": "rhsa-2026:9388"}]}}}]